Cybersecurity Threat Analyst Job Sioux Falls area,South Dakota USA,IT/Tech

Monitor security alerts from approved tools and perform initial triage using documented procedures and playbooks
Review firewall, email, web, DNS, endpoint, and other logs to gather evidence and identify suspicious activity indicators
Create and update tickets, document actions taken, and eskalate incidents according to severity and escalation criteria
Support incident response under guidance, including evidence collection, basic scoping, containment tracking, and follow-up documentation
Review threat intelligence alerts and indicators of compromise for relevance and eskalate significant findings
Run approved vulnerability scans and review results for potential issues, duplicates, and items requiring validation
Collect and review asset information, configurations, and running processes for investigations and vulnerability management
Operate security monitoring tools and perform routine configuration or tuning tasks under guidance
Participate in change management and follow security operations procedures
Communicate technical findings to cybersecurity team members, internal partners, and vendors
Assist with security product evaluations and recommend improvements based on documented requirements
Support security metrics, trend reporting, and security awareness activities
Use approved AI-assisted capabilities to enrich alerts, correlate indicators, summarize evidence, and support investigations
Use approved AI assistance to draft queries, investigation notes, reports, scripts, and stakeholder communications
Validate AI-generated content against authoritative sources and follow approved-use, data-handling, human-review, documentation, and auditability requirements
Maintain awareness of emerging threats, including AI-enabled phishing, social engineering, and enterprise AI misuse, and eskalate relevant findings
Perform other duties as assigned

Requirements

Associate or bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education, training, and experience
Internships, academic labs, help desk, system administration, network support, or security operations experience may qualify as relevant experience
Foundational understanding of cybersecurity principles, common threats, TCP/IP networking, and Windows, Linux, or macOS operating systems
Basic familiarity with security logs, monitoring tools, vulnerability management concepts, and ticketing workflows
Ability to follow documented procedures, maintain accurate records, recognize when additional assistance is needed, and eskalate promptly
Basic scripting, command-line, or query skills, or demonstrated willingness to learn Python, Power Shell, or SQL
Familiarity with generative AI and machine learning concepts used in cybersecurity, including capabilities, limitations, privacy risks, and human validation
Clear written and verbal communication, sound organization, and ability to work collaboratively
Coursework, internship, lab environment, or hands‑on experience related to security operations, threat analysis, incident response, or vulnerability management preferred
Familiarity with SIEM, EDR/XDR, SOAR, threat intelligence, vulnerability scanning, or ticketing platforms preferred
Basic knowledge of network traffic, firewalls, intrusion detection or prevention, packet analysis, cloud services, databases, or data visualization tools preferred
Entry‑level certification such as CompTIA Security+, Network+, CySA+, Microsoft SC-900, or comparable vendor credential, or willingness to pursue one preferred
Basic experience with scripting, APIs, or low-code automation preferred
Familiarity with approved AI‑assisted workflows for security research, documentation, query development, or analysis preferred
Awaren…