Cybersecurity Operations Analyst

Link Snacks is hiring a Cybersecurity Operations Analyst within its Global IT organization to support day-to-day cybersecurity monitoring and response. The role focuses on alert monitoring, investigation, incident support, and coordination across internal IT teams and external security providers.

• Monitor, triage, investigate, and respond to cybersecurity alerts from SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms.
• Support the security operations environment, including Microsoft Sentinel SIEM operations, Data Collection Rules, data collectors, data sources, alert logic, and related components.
• Support and maintain MDR, EDR, AV, and other security tools across cloud, endpoint, and network security.
• Assist with incident response activities such as evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up.
• Identify security gaps and recommend improvements to organizational incident response processes, including playbooks, policies, and procedures.
• Create security incident reports and present them to business stakeholders, covering business impact, response actions, remediation status, and lessons learned.
• Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies.
• Support vulnerability management by reviewing scan results, validating findings, prioritizing remediation, tracking exceptions, and coordinating remediation with infrastructure, application, network, and OT teams.
• Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and guidance for secure configurations.
• Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely event resolution.
• Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating follow-up with vendors and internal stakeholders.
• Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use.
• Perform other duties as assigned.

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
• 2+ years of hands-on experience in cybersecurity operations, security monitoring, incident response, vulnerability management, IT support, or related technical operations.
• Strong foundation in cybersecurity operations, including alert triage, incident response, endpoint security, identity security, phishing analysis, and vulnerability remediation support.
• Experience using ticketing systems, security consoles, endpoint tools, identity platforms, and basic scripting or query languages to investigate and document security issues.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra , Phosphorus, Tenable Nessus, or similar enterprise security technologies.
• Ability to analyze logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events, and vulnerability findings to support timely security decisions.
• Proven ability to investigate cybersecurity alerts, document findings, escalation risks, and support incident response activities accurately and in a timely manner.
• Working knowledge of vulnerability management, endpoint security, identity security, phishing response, access control, and common enterprise security technologies.
• Ability to manage cybersecurity support tickets, communicate status clearly, and coordinate remediation activities across technical teams.
• Experience working with security frameworks and standards such as ISO 27001, NIST, and SOC
  2.
• Capable of collaborating with security service providers, internal IT teams, vendors, and end users during security investigations and support requests.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with security technologies and tools, including SIEM…