Security Analyst ; F-M, CST

At Ntiva, we’re more than a Managed Services Provider, we’re a community dedicated to helping each other, our clients, and their businesses thrive both personally and professionally. As a Security Analyst I, you'll be our first line of defense against cyber threats. You'll swiftly respond to security alerts, investigate potential malicious activity, secure compromised accounts, and review change activity to prevent or minimize security events.

By managing routine security tool adjustments and escalating complex issues, you'll ensure our defenses remain effective and responsive, safeguarding our client's assets and data.

This is a remote position; however, team members should be willing and able to travel if the need arises, though such travel is expected to be infrequent. Friday-Monday, 3pm–2am CST (following a required training period on day shift, M–F 8am–5pm CST — duration varies by individual progress).

• Actively monitor security dashboards, queues, and alerts from various sources (automated tools, escalated tickets) to detect potential threats.
• Incident Triage & Response:
  Conduct initial investigations into security alerts, perform rapid response actions like securing user accounts, and collect necessary log data for analysis.
• Analyze findings to determine the scope and severity of incidents, resolving straightforward issues and escalating complex cases to Level 2 Analysts with clear, concise information.
• Security Tool Management:
  Review and implement authorized, routine changes to security tools, such as processing client exemption requests in the EDR or temporarily adjusting settings for testing.
• Collaborate with the Security Team:
  Work closely with fellow analysts and security engineers, sharing information, participating in team discussions, and contributing to a collaborative security environment.
• Engage with Users/Clients:
  Communicate professionally and clearly with end-users or clients to gather details about potential security issues, explain security procedures, and provide guidance during incident resolution.
• Reactive Support, Client Strategy, NOC) to coordinate security responses and share necessary information.
• Document Actions:
  Offer timely and helpful support related to security inquiries, upholding a professional and customer-service-oriented approach in all interactions.

• ~ 3-5 years in an IT role including log analysis, account/access management, or endpoint troubleshooting
• ~ This is a full-time role requiring your full alertness and reliable attendance during scheduled hours. Additional outside employment, regardless of hours, is not permitted
• ~ Hands-on exposure to at least one EDR/SIEM platform (e.g., Sentinel One, Crowd Strike, Microsoft Defender, Microsoft Sentinel)
• ~ Direct hands-on experience using Connect Wise Manage for ticket documentation, with a demonstrated track record of clear, timestamped, audit‑ready incident notes
• ~ Must have practical familiarity with at least one of: SIEM log correlation, Windows Event Viewer (Security log IDs like 4624/4625/4648), or a ticketing‑based alert queue
• ~ Passion for delivering outstanding customer service, with a track record of exceeding client expectations
• ~ This role involves extended periods of sitting or standing and regular use of computers and office equipment

Ability to communicate professionally, in English, both written and orally

• ~ Security + Certification
• Medical, Dental and Vision coverage for employee and family
• ~Short-Term (voluntary enrollment) and Long‑Term Disability coverage (company provided)
• ~Health Savings Account (HSA) Options / PPO Options
• ~Employee Assistance Program
• ~Paid Time Off (PTO) + Volunteer Time Off (VTO) + 8 Paid Holidays + 3 Floating Holidays
• ~Education…