Security Analyst, 2nd Shift

At nu Harbor, we help organizations navigate an increasingly complex cybersecurity landscape with confidence. By combining expert guidance, innovative technology, and trusted partnerships, we make security stronger, more effective, and easier to understand. We’re looking for talented individuals who are passionate about solving meaningful challenges, helping clients succeed, and continuously improving alongside a team that values curiosity, collaboration, and impact.

The Security Analyst is an individual contributor within nu Harbor’s Managed Services Security Operations team, responsible for monitoring client environments, triaging security alerts, and conducting investigations, including complex or high-severity findings, through to disposition and escalation to clients and internal teams within SLA requirements. Analysts are expected to work through difficult findings on their own, escalating to a Senior Analyst or the Security Operations Manager when a finding exceeds their scope, tooling access, or authority to act.

The assigned shift for this role is Wednesday - Saturday, 3:00pm-1:30am ET.

In this role, you will:

• Live by the nu Harbor corporate values:
  Help Clients Win, Always Improve, Protect the House.
• Analyze security alerts, events, and trends, and effectively communicate the value of NuHarbor services to clients.
• Perform alert triage, classification, disposition, and escalation within SLA requirements.
• Conduct investigations independently, including complex or high-severity findings, providing actionable, context-relevant escalations and recommendations; escalatem to a Senior Analyst or the Security Operations Manager when a finding exceeds the Analyst’s scope, tooling access, or authority to act.
• Execute containment and response actions (e.g., host isolation, process termination, indicator blocking) on client endpoints and in-scope tooling, in accordance with documented client rules of engagement.
• Document each ticket with a clear evidence trail, investigative reasoning, and disposition rationale, to a standard that supports escalation or client delivery without requiring rework.
• Operate within the scope of SIEM, MDR, mXDR, and operational incident response tooling in accordance with documented rules of engagement.
• Identify security gaps and mitigations in client environments and communicate them to internal teams and clients as directed.
• Communicate effectively and clearly with internal support teams and nu Harbor clients.
• Participate in client meetings on security operations as scheduled.
• Demonstrate a team-first mindset, operating independently on assigned work and proactively supporting operations regardless of whether a manager is actively present.
• Generate reports to nu Harbor standards and schedules.
• Develop, implement, and improve documentation.
• Identify and scope opportunities for process improvements.
• Flag noisy, low-fidelity, or broken detections to a Senior Analyst or Detection Engineering for review.
• Document and communicate shift hand-off and pass-down per established procedures, ensuring continuity of active investigations and open items across shift boundaries.
• Remain up to date on threats, exploits, and vulnerabilities.
• Proactively identify and communicate internal and client risks.

We’re looking for someone who brings these minimum qualifications:

• Bachelor’s Degree in a related field
  • In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• A minimum of two (2) years’ experience with Splunk Enterprise Security, Crowd Strike Falcon, and/or Microsoft Sentinel
• Ability to explain simple hardening methods for network and…