Cybersecurity Analyst

Scope of the Position

The Cybersecurity Analyst is responsible for supporting and enhancing the organization's security operations and engineering capabilities. This role blends hands-on threat detection and incident response with security platform administration, automation, and continuous improvement. The position plays a critical role in maintaining the health and effectiveness of the enterprise security stack, strengthening identity and cloud security controls, and ensuring the organization's ability to detect, respond to, and mitigate evolving cyber threats.

Roles and Responsibilities

• Support daily security operations through proactive threat hunting across endpoint, network, identity, email, and cloud environments.
• Support investigation and response activities for high-confidence alerts using behavioral analytics, threat intelligence, and MITRE ATT&CK--aligned analysis.
• Manage and maintain detection pipelines, correlation rules, and automated response workflows across SIEM, EDR/XDR, SOAR, and email security platforms.
• Act as subject matter expert for the enterprise security stack, ensuring platform health, optimization, and continuous improvement.
• Administer and support identity and access management (IAM) controls, including conditional access, role-based access control (RBAC), and Zero Trust enforcement across enterprise platforms.
• Support the vulnerability management program through risk analysis, remediation coordination, validation of security fixes, and translation of findings into actionable guidance for infrastructure and development teams.
• Collaborate with infrastructure, cloud, and development teams to improve security posture and remediate identified risks.
• Enforce system baseline hardening standards across Windows, Linux, macOS, and Azure services.
• Support compliance initiatives by maintaining documentation, gathering audit evidence, and contributing to alignment with applicable security frameworks.
• Develop and maintain clear operational documentation, playbooks, and procedures to enhance response consistency and cross-team collaboration.
• Continuously monitor the threat landscape and adjust detection and response capabilities accordingly.