Help Desk + Security Analyst

Help Desk + Security Analyst
Employment: Full-time, W-2 employee of our Winchester, Virginia-based client

Location: Winchester, VA. On-site at the CPA firm (160 Exeter Drive) 2-3 days per week - closer to 3. Remote the remainder.

Reports to: The security team of our Winchester, Virginia-based client; coordinates day-to-day with the CPA firm's IT and security leadership

Compensation: Base salary $62,000-$67,000, commensurate with experience
About the engagement

We are recruiting on behalf of our Winchester, Virginia-based client for a hybrid Help Desk + Security Analyst role embedded inside their anchor CPA firm engagement. Time splits roughly 50/50: half supplementing the CPA firm's internal help desk, half working as a security analyst inside the security program our client manages on the firm's behalf. The hire is our client's hands-on presence in the CPA firm's office. This is a strong seat for someone who wants to grow into deeper security work without giving up the IT generalist skills that keep them sharp and useful.
Responsibilities
Help Desk (~50%)

• Tier 1 / Tier 2 end-user support: workstations, accounts, productivity software, common application issues
• Microsoft 365 administration (Exchange Online, Teams, SharePoint, Entra ID basics)
• Hardware support, imaging, and provisioning alongside the CPA firm's IT team
• Ticket queue ownership and triage

Security (~50%)

• Vulnerability management: scan operations, finding triage, remediation tracking with IT and end users
• Phishing simulation campaigns: planning, deployment, reporting, follow-up training
• Security ticket triage and investigation (EDR alerts, email security, identity)
• Incident response support under the senior leadership of our Winchester, Virginia-based client
• Routine hygiene: access reviews, configuration checks, hardening tasks

Required Experience

• 2-4+ years across IT support / help desk / junior SOC or security analyst work (any combination)
• Strong Microsoft 365, Azure, and Windows endpoint fundamentals
• Familiarity with vulnerability scanning workflows - not an expert, but knows what a CVSS score is and how to drive a fix
• Solid customer service instincts: patient, professional, willing to help
• Lives within reliable commuting distance of Winchester, VA, and can be on-site 2-3 days per week

Preferred Experience

• Security+, Network+, or equivalent certifications
• Experience with EDR platforms (Microsoft Defender, SentinelOne)
• Prior exposure to phishing simulation tools (KnowBe4, etc.)
• Curiosity about offensive security - there is real room to grow toward pentest and red-team adjacent work over time

Compensation

• Base salary $62,000-$67,000, commensurate with experience
• Full benefits: medical, dental, vision, and 401(k) with employer match
• Paid time off and supported professional development