Cyber Security Analyst
Summary
Monitor security events, investigate alerts, and respond to incidents across endpoints, cloud, and identity systems while managing vulnerabilities and PKI infrastructure.
Overview:
The Cyber Security Analyst is responsible for protecting the organization's information assets through proactive monitoring, threat detection, incident response, vulnerability management, and operational security activities. The role supports the IT Cyber Security Manager in executing the organization's cybersecurity strategy and maintaining a secure technology environment.
The Cyber Security Analyst serves as a trusted advisor by balancing cybersecurity risk with business objectives and helping ensure the organization's security program aligns with industry frameworks including the NIST Cybersecurity Framework (CSF 2.0), CIS Critical Security Controls, and Microsoft Security Best Practices.
The Cyber Security Analyst is expected to exercise sound judgment, communicate effectively with technical and non-technical stakeholders, and escalate risks and significant security events to the IT Cyber Security Manager when appropriate.
Key Responsibilities:
- Security Operations
- Monitor and investigate security events across endpoints, identity, email, cloud, and network security platforms.
- Analyze alerts and coordinate response actions.
- Assist with incident response, documentation, and threat hunting.
- Manage PKI infrastructure on Prem and in the cloud
- Assist Development teams with remediation of vulnerabilities using WIZ
- Vulnerability & Risk Management
- Prioritize vulnerabilities based on business risk.
- Coordinate remediation and validate corrective actions.
- Assist with penetration testing and remediation tracking.
- Identity, Cloud & Endpoint Security
- Monitor Entra ID, endpoint security, Microsoft 365, and privileged access.
- Review application permissions and service principals.
- AI Security & Governance
- Support secure AI adoption.
- Monitor for Shadow AI.
- Evaluate AI solutions for security and privacy risks.
- Security Engineering & Administration
- Administer and tune cybersecurity technologies.
- Develop security automation using PowerShell or Microsoft Graph.
- Governance, Risk & Compliance
- Support NIST CSF 2.0, CIS Controls, audits, documentation, and risk assessments.
- Security Awareness & Collaboration
- Support awareness training.
- Collaborate across IT and business teams.
- Stay current on emerging threats.
- Other duties as assigned.