Associate Analyst, Cyber Security

The Associate Analyst, Cybersecurity is an entry-level security role for a motivated individual with an IT foundation who is actively building security knowledge. Working under close direction of the Senior Analyst and Director of Information Security, this person executes day-to-day security tasks accurately, escalates early, documents thoroughly, and grows steadily toward Analyst I proficiency.

Security Monitoring & Incident Response

• Learn to monitor security alerts using Cato and Checkpoint alongside the Senior Analyst, building triage judgment before working independently.

• Under Senior Analyst guidance, document alert details, gather initial context, and flag events for review; does not independently close alerts until proficiency is demonstrated.

• Assist during incident response as directed; document findings accurately while the Senior Analyst or Director leads investigation and containment.

• Document all incidents and lessons learned; help manage the daily FreshService inbox and InfoSec mailbox under Senior Analyst oversight.

• Follow established security playbooks step-by-step; ask the Senior Analyst before deviating from any documented process.

Vulnerability Management

• Learn to run vulnerability scans using Tenable under Senior Analyst instruction, with scope and results reviewed before distribution.

• Keep vulnerability tracking records current as directed; Senior Analyst determines prioritization and owner communications.

• Verify remediation activities to confirm vulnerabilities are fully resolved.

• Pull and organize vulnerability data as directed; does not interpret trends or produce reports independently.

Identity & Access Security

• Learn identity and access controls within Microsoft Entra ID; assist with assigned tasks under Senior Analyst direction.

• Assist with access reviews by pulling reports and logging entries; flag anomalies to the Senior Analyst and process removals only after approval.

• Learn to recognize anomalous sign-in and access patterns; escalate all concerns to the Senior Analyst.

Vendor & Third-Party Risk

• Gather vendor documentation and complete questionnaire sections as directed; does not independently evaluate or rate vendor risk.

• Complete vendor questionnaire entries accurately; flag anything unclear to the Senior Analyst.

• Keep third-party risk register records current as directed; does not modify risk ratings without Senior Analyst approval.

• Participate in software onboarding reviews prior to procurement approval.

Security Governance, Compliance & Awareness

• Assist with maintaining InfoSec policies and procedures; support internal audits and compliance reviews.

• Administer phishing simulations, coordinate security training assignments, and track completion rates.

• Contribute to disaster recovery documentation and tabletop exercises.

• Stay current on emerging threats and developments relevant to higher education.