Cybersecurity Analyst

Work Arrangement: Full-time, on-site at client location Schedule: Monday–Friday, standard business hours Employment Type: Contract-to-permanent Key Responsibilities Monitor and prioritize security alerts based on severity, business risk, and potential impact. Investigate security incidents using SIEM, SOAR, EDR, network, identity, cloud, and SaaS telemetry. Distinguish true security threats from false positives through detailed analysis and troubleshooting. Support incident-response activities, including containment, evidence preservation, remediation, and recovery. Analyze logs, endpoint artifacts, network traffic, user activity, and system behavior. Determine the root cause, scope, and potential impact of security incidents. Document investigative findings, actions, evidence, and recommendations in ticketing and case-management systems. Communicate technical findings clearly to client stakeholders and provide practical remediation guidance. Follow established security procedures, escalation paths, playbooks, and incident-response runbooks. Help improve detection rules, alert thresholds, response playbooks, and operating procedures. Remain current on emerging vulnerabilities, threat intelligence, malware, and attacker techniques. Build strong working relationships with the client’s technology and security teams. Required Qualifications Approximately 4–8 years of cybersecurity monitoring, SOC, incident-response, or related security experience. Hands-on experience reviewing, triaging, and investigating security alerts. Working knowledge of SIEM, SOAR, and endpoint detection and response tools. Experience analyzing logs and correlating information across multiple security data sources. Understanding of phishing, malware, account compromise, suspicious network activity, and common attack methods. Familiarity with the MITRE ATT&CK framework. Strong troubleshooting, documentation, and analytical skills. Professional communication skills and the ability to work directly with client personnel. Advanced experience managing security incidents from initial detection through containment, remediation, and recovery. Strong forensic investigation skills, including log analysis, endpoint artifact review, evidence preservation, and timeline reconstruction. #J-18808-Ljbffr