Cyber Security Analyst

The Cyber Security Analyst is responsible for protecting the organization’s information systems, networks, applications, and data from cyber threats. This position monitors security systems, investigates alerts, coordinates incident response activities, manages vulnerability remediation, supports identity and access controls, and partners with IT teams to strengthen the company’s overall security posture. The Cyber Security Analyst also serves as a key technical resource for secure network architecture, security awareness, risk assessments, and leadership reporting.

• Perform diagnostic tests and analyze data to spot threats to computer systems.
• Develop security measures to safeguard systems.
• Make recommendations regarding software and hardware to strengthen information storage and security.
• Stay up to date on threat actors, vulnerabilities, attack techniques, ransomware, phishing, malware, and emerging threats.
• Aid in developing and implementing best practices to reduce the risk of data theft.
• Install and maintain endpoint detection and response, endpoint protection, and security configuration management.
• Respond to cybersecurity incidents involving systems, identities, applications, networks, or data to contain, eradicate, and recover from security incidents.
• Write reports outlining diagnostic test findings and explaining cyber-attack events when they occur and provide a detailed after-action report.
• Validate that critical security systems are appropriately backed up and recoverable.
• Provide advanced security-related technical support during investigations and incidents.
• Participate in an on-call rotation for high-severity cybersecurity incidents and critical security-system outages.
• Maintain accurate inventories of cybersecurity and physical-security systems.
• Oversee SIEM alert tuning, investigation, triage, and escalation in coordination with SOC providers.
• Serve as the primary incident response coordinator during security events, including investigation, documentation, and follow-up.
• Develop and deliver security awareness and training initiatives.
• Maintain operational security metrics and prepare reporting for leadership.
• Partner with IT and system owners to manage IAM controls, access reviews, and privileged access governance.
• Act as a subject matter expert for secure network architecture, including firewalls, VPNs, SD-WAN, wireless, and authentication systems.
• Lead firewall and network security review processes to ensure alignment with internal policies.
• Own the end-to-end vulnerability management lifecycle across infrastructure and applications.
• Coordinate remediation efforts with IT Networking, IT Server, IT Development, and Operations teams.
• Conduct targeted risk assessments and support enterprise risk management activities.
• Lead and oversee email security, including anti-phishing, anti-malware, spam protection, email authentication, threat investigation, and implementation of security controls to protect the organization from email-based threats.

• Bachelor's degree in cybersecurity, computer science, information systems, or a related field or four (4) years related experience and/or training; or equivalent combination of education and experience.
• Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations.
• Ability to effectively present information and respond to questions from groups of managers, clients, customers, and the general public.
• Ability to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists.
• Ability to interpret a variety of instructions furnished in written, oral, diagram, or…