Security Analyst

This role supports the organization's information security program — monitoring networks, tuning security tools, maintaining policy documentation, and responding to threats across the environment. Key Responsibilities Monitor, operate, and tune SIEM, EDR/XDR, email security, and cloud security platforms Detect, triage, and investigate potential attacks, intrusions, and anomalous activity Use AI-assisted security tools to speed up detection and response, and help assess risks tied to AI usage across the org Support vulnerability management (scanning, prioritization, remediation tracking) Monitor and secure cloud/SaaS environments Respond to EDR alerts — investigate, contain, remediate, and escalated Document and escalate incidents with clear handoff notes Manage service tickets within SLA, escalating as needed Contribute to NIST CSF 2.0 implementation and ISO 9001/27001 compliance efforts Support broader security policy, threat assessment, and incident response work Requirements Bachelor's in Cybersecurity or related field (or equivalent experience) CISSP, CEH, GIAC, Security+/CySA+, or similar certification 4+ years technical experience, 2+ in information security Hands-on experience with EDR/XDR, IPS/IDS, DLP, MFA, VPN/zero trust, and similar controls Fluency with SIEM/SOAR/EDR platforms (Sentinel, Splunk, CrowdStrike, etc.) Strong triage, investigation, and log correlation skills Query/scripting ability (KQL, SPL, Python, or PowerShell) Familiarity with MITRE ATT&CK, TCP/IP, and OSI model security implications Awareness of identity-based attack patterns (MFA fatigue, OAuth abuse, impossible travel, etc) Strong written/verbal communication and documentation skills Self-directed, detail-oriented, comfortable in a fast-paced environment #J-18808-Ljbffr SpringbokIT