ETF Security Analyst - State |Remote | WI Residents | Due

Work Arrangement: 100% remote within Wisconsin or in the office. Candidates must be CURRENT Wisconsin residents. No relocation allowed.

Duration: 6+ months

This entry-level role will serve as the first line of defense in monitoring our network, systems, and security tools. They will be responsible for reviewing Security Operation Center (SOC) dashboards, triaging incoming alerts, analyzing logs, reviewing vulnerabilities, and documenting incidents. This role is for cybersecurity professional looking to build a strong foundation in threat detection, incident response, and SOC operations.

• SOC Tool Monitoring & Health:
  Regularly review and monitor Security Operation Center tools (such as SIEM, DLP tools, Web Application firewalls) to ensure operational health, proper log ingestion, and continuous visibility.
• Log & Alert Triaging:
  Monitor real-time security dashboards and system logs, perform initial triage on alerts, and escalating to senior BISM staff as needed to distinguish between false positives and legitimate security events.
• Vulnerability Review:
  Review routine vulnerability scan results and assist in tracking known weaknesses across assets.
• Ticketing & Documentation:
  Accurately document all security events, investigations, and remediation steps within the ticketing system. Ensure tickets are resolved and closed out in accordance with standard operating procedures.
• Escalation:
  Escalate complex, high-priority, or unverified threats to more senior SOC staff or incident response leads with clear and concise briefing notes.
• Cross-Functional Collaboration:
  
  Collaborate with IT, system administration, and other cross-functional teams during investigations and incident resolution as needed.

• Foundational Knowledge:
  Basic understanding of networking protocols (TCP/IP, DNS, HTTP/S), operating systems (Windows and Linux), and common security concepts.
• Analytical Mindset:
  Strong attention to detail with a natural curiosity for investigating anomalies and logs.
• Communication:
  Good written and verbal communication skills, with the ability to document technical findings clearly and work effectively in a team environment.

• IT Professional - 1+ years
• Strong attention to detail
• Excellent communication skills (written and verbal)

• CISSP or equivalent
• Education (Preferred but not required):
  Associate's or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience/certifications).

• One round via Microsoft Teams.

Equipment provision and requirements are not specified in either source.

Schedule:

40 hours per week; day shift, 8:00 a.m. 5:00 p.m.; no weekends. Staff augmentation; RAW billing type:
Daily. One position; bid limit: two candidates per vendor.

Education conflict - verification required: RAW minimum education field says Bachelor's Degree. The client PD and the RAW narrative explicitly state education is preferred but not required and describe an associate's or bachelor's degree in Cybersecurity, IT, Computer Science or a related field, or equivalent practical experience/certifications. Confirm the controlling requirement before rejecting or submitting a candidate on education grounds.

Candidate Evaluation - Prioritized Skill Baseline

• Rank 1 Skill:
Alert Triage

• Skill Category:
Critical / Primary

• Weight: 3

• Source:
Both - responsibility

• Selection Rationale:
Initial security-alert review, false-positive discrimination and appropriate escalation.

• Rank 2 Skill: SOC Monitoring

• Skill Category:
Critical / Primary

• Weight: 3

• Source:
Both - responsibility

• Selection Rationale:
Maintains…