Cybersecurity Analyst

Cybersecurity Analyst

Build the Future

Do you enjoy testing the limits of possibility? At McGraw Hill, our Global Technology Services organization drives progress and help build the future of learning. If you have the passion and technical expertise to thrive in an innovative and agile environment, we want to learn more about you.

Your Impact on the team

McGraw-Hill is seeking a Cybersecurity Analyst who can collaborate with development teams, business teams, and cross-functional technology. As a Cybersecurity Analyst you should have a general understanding of email security and server technology. The McGraw-Hill Cybersecurity Team is a highly technical, metrics driven team, with a consistent focus on process optimization and automation to improve effectiveness. You must be able to report, quantify stats, trends, and metrics to quantify risk and results.

This is a remote position open to applicants authorized to work for any employer within the United States.

What you will be doing

• Monitor the McGraw Hill Splunk SIEM platform for security alerts.
• Handle 2 daily transition calls with the evening SOC team in India, at 9:15 AM EST and 4:15 PM EST.
• Perform standard operating procedures (SOPs) for each alert type, to quickly respond to security alerts and investigate them until closure.
• Work with IT personnel to report violations and close security alerts.
• Leverage our security automation tool (Splunk SOAR) for responding to incidents.
• Escalating any P1 (high priority) alerts immediately to the SOC manager
• Perform phishing email attack investigations.
• Perform triage steps when end users fall victim to attacks.
• Perform threat hunting on attack techniques commonly used by adversaries.
• Provide testing and supplemental support for Cybersecurity engineer project tasks.
• Track security incidents in a spreadsheet for monthly metrics.
• Perform daily, weekly, and monthly threat hunting tasks.

We're looking for someone with

• A passion for infosec, analytical skills and a quick learner.
• Basic cybersecurity skills.
• General understanding of servers, applications, LDAP, DNS, IP addressing and subnetting, ports.
• Familiarity with Splunk and how to run Splunk queries is a bonus.
• Awareness or knowledge of Python and PowerShell is a bonus.
• Strong communication skills.
• Understanding of email headers.
• General understanding of malware sandboxing technology.
• Understanding of malware and phishing tools/techniques.

Preferred:

• General understanding of AI and MCP.
• Experience triaging cloud and web-app related security alerts.
• AWS and/or cybersecurity related training and certifications are a plus.

Why work for us?

There has never been a better time to join McGraw Hill. In our culture of curiosity and innovation, you will be able to own your growth and develop as we do.

The pay range for this position is between $75,800 - $100,000 annually. However, base pay offered may vary depending on job-related knowledge, skills, experience, and location. Additionally, a full range of medical and/or other benefits may be provided, depending on the position offered. Click here to learn more about our benefit offerings.

McGraw Hill recruiters always use a "@mheducation.com" email address and/or from our Applicant Tracking System, iCIMS. Any variation of this email domain should be considered suspicious. Additionally, McGraw Hill recruiters and authorized representatives will never request sensitive information in email.