Cybersecurity Analyst

Cybersecurity Analyst

NetFire is seeking a motivated, detail-oriented Cybersecurity Analyst to join our growing information security team. This is an excellent opportunity for someone at the start of their career who is passionate about protecting systems, networks, and data. You will work alongside experienced security professionals, gain hands-on exposure to real-world threats, and build the foundation for a long-term career in cybersecurity.

We believe in investing in our people. You do not need years of experience, you need curiosity, drive, and a genuine interest in keeping systems secure.

What you will do:

• Assist in developing, implementing, and maintaining security policies, procedures, and standards in alignment with industry frameworks and regulatory requirements (e.g., NIST, CIS Controls, PCI DSS, HIPAA).
• Monitor security events, investigate alerts, and respond to incidents. Working to identify threats, assess risks, and contain issues before they escalate.
• Perform regular vulnerability assessments and support penetration testing activities to surface weaknesses across systems and network infrastructure.
• Participate in the administration and tuning of security tools including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, endpoint protection platforms, and vulnerability scanners.
• Support internal and external stakeholders with security-related inquiries, incidents, and compliance questions.
• Contribute to security awareness efforts and help document lessons learned from security events.
• Stay current on emerging threats, CVEs, and evolving best practices - and bring that knowledge back to the team.

Technical Knowledge:

• Solid understanding of computer networking concepts, protocols (TCP/IP, DNS, etc.), and network security methodologies.
• Familiarity with core security principles: confidentiality, integrity, availability, non-repudiation, and authentication.
• Working knowledge of risk management concepts, threat modeling, and vulnerability assessment processes.
• Exposure to security tooling such as firewalls, IDS/IPS, endpoint protection, and vulnerability scanners.
• Understanding of regulatory frameworks including PCI DSS and HIPAA is a plus.

Operating Systems:

• Windows 11
• Windows Server
• macOS / iOS / iPadOS
• Linux; Debian-based and/or RHEL-based distributions

Software & Collaboration Ecosystems:

• Microsoft 365 (Exchange, Teams, SharePoint, Defender)
• Google Workspace
• Microsoft Azure Active Directory / Entra ID
• Microsoft Active Directory

Skills:

• Strong analytical mindset with a curiosity-first approach to problem-solving.
• Clear written and verbal communication, able to explain security concepts to non-technical audiences.
• Organized and detail-oriented; comfortable managing multiple tasks and priorities.
• A team player who also takes initiative and works well independently.

Education:

• Bachelor's or Associate's degree in Computer Science, Information Technology, Cybersecurity, or a related field required.
• High school diploma or GED required for candidates without a degree.
• Technical certifications and demonstrated self-directed learning (home labs, online courses, CTF competitions, etc.) are welcomed and may substitute for formal education in exceptional cases.

Certifications (Preferred, Not Required):

• CompTIA: Security+, CySA+, PenTest+, CASP+
• ISC²: CC (Certified in Cybersecurity), SSCP, CISSP
• ISACA: CISM, CISA, CRISC