Security Analyst II

Security Analyst

At Crutchfield, our innovative company culture is centered around helping our employees succeed while delivering best-in-class service to our customers. We're looking for an experienced Security Analyst to join our team based in our Charlottesville location. In short, we sell fun stuff and love doing it! For the 4th year in a row, we've been named as one of the Best Places to Work by Virginia Business Magazine and Best Companies Group.

Position Overview:

As a Security Analyst, you will prevent, detect, investigate, and remediate cybersecurity issues and work closely with operational teams to troubleshoot matters involving security technologies. Successful candidates will bring strong communication and interpersonal skills, a genuine interest in information security, and the ability to work effectively with colleagues both within and outside IT. When new or unanticipated situations arise, the analyst is expected to apply sound judgment, conduct self-directed research, review technical documentation, and consult with colleagues to gather the information needed to move the work forward.

As a Security Analyst you will:

• Monitor and manage alerts from security information and event management (SIEM) systems, server and firewall logs, network traffic, endpoint detection and response (EDR) platforms, email security gateways, and secure web gateways
• Review threat intelligence and other written information from trusted email and web sources to stay informed about current cyber threats
• Maintain awareness of evolving threats, technologies, and defensive practices through training and independent research
• Investigate security incidents by collecting and analyzing logs, alerts, and other available evidence
• Identify and implement appropriate measures to contain, mitigate, and remediate security incidents or identified issues
• Follow and help maintain Crutchfield incident response policies, plans, and procedures
• Prepare clear written reports about security threats, incidents, findings, and recommendations for appropriate internal or external audiences
• Audit systems against applicable standards or frameworks, including NIST Cybersecurity Framework 2.0, validate technical controls, and create supporting documentation
• Assess the security posture of systems, recommend changes when needed, and coordinate implementation with the appropriate operational teams
• Collaborate with cross-functional operational teams to troubleshoot security controls, investigate technical issues using documentation and peer expertise, and maintain accurate, reusable security documentation
• Use AI-enabled tools thoughtfully when approved, understand associated risks and benefits, verify outputs, and apply independent human judgment

Qualifications:

• At least two years of experience in a full-time cybersecurity role, or an equivalent combination of cybersecurity certifications and experience in a security-adjacent technical role such as systems or network administration
• Strong technical foundation with demonstrated analytical, troubleshooting, and problem-solving skills
• Working knowledge of information security principles and best practices
• Proficiency with the Windows operating system, email, Microsoft Word, and web browsers
• Strong verbal and written communication skills
• Ability to work effectively both independently and as part of a team
• Self-motivation, curiosity, adaptability, and a willingness to learn and share information

Preferred Qualifications:

• Familiarity with Microsoft Entra ID and the Microsoft Defender product suite
• Familiarity with PowerShell or other command-line interfaces
• Experience interpreting PCI DSS, NIST Cybersecurity Framework 2.0, or similar security and compliance frameworks
• Experience reviewing logs, investigating alerts, validating technical controls, or supporting incident response activities

This position follows a hybrid work model, with 3 days onsite each week and the remaining days remote. Candidates should be able to commute to our office regularly and collaborate in person with team members. All remote work must be done within the Commonwealth of Virginia. We are unable to offer sponsorship or relocation assistance for this position.

Salary and Benefits:

The starting salary range for this role is $75,000 - $85,000 depending on skills and experience. This full-time position comes with a comprehensive benefit package including two health insurance plans to choose from along with dental and vision insurance plan options. We also offer a competitive wellness program, tuition reimbursement, 401K retirement plan, relaxed dress code, and discounts on the fun stuff we sell.

All full-time employees are also offered: short-term disability insurance and long-term disability insurance options, employer-paid life insurance and voluntary life insurance options, including those for spouse and children. FSA and HSA options are also available. Ask us about these benefits in your interview - we're glad to provide details!

Crutchfield is an equal opportunity employer, and we welcome applications from all suitably qualified persons regardless of their race, color, sex, sexual orientation, gender identity, national origin, ethnic origin, religion/belief, disability, veteran status, or age.