Cyber Security Analyst

Cyber Security Analyst – Threat Detection, Cloud & Security OperationsCompany: Clinisol Tech Inc.Employment Type: Full-Time, W2 (deployed to client projects)Experience: 3-4 yearsCompensation: $80,000 – $90,000 per yearWork Mode: On-Site / HybridWork AuthorizationAt this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship.Why This Role?The best senior analysts are not one-trick specialists — they can triage an incident at 9 AM, tune a detection rule at noon, and brief leadership on cloud risk by 4. This role is built for that profile: broad, hands-on ownership across SOC operations, threat hunting, cloud security, and vulnerability management, with the tooling depth that senior security roles across the market demand.Job SummaryClinisol Tech Inc is seeking a Senior Cyber Security Analyst to take a lead role across security operations. You will drive threat detection and incident response, harden cloud and identity environments, run vulnerability management, and mentor junior analysts — operating across the full modern security stack: SIEM, EDR/XDR, SOAR, and cloud-native security tooling.Key ResponsibilitiesLead detection, triage, investigation, and response for security incidents across cloud and on-prem environments.Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma).Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows.Own vulnerability management end-to-end — scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting.Harden cloud security posture across AWS and Azure — identity (IAM), logging, misconfiguration remediation, and CSPM findings.Support identity security and Zero Trust initiatives — conditional access, MFA, privileged access management.Conduct phishing, malware, and forensic analysis; produce root-cause and lessons-learned reports.Mentor junior SOC analysts, review escalations, and improve runbooks and incident-response procedures.Brief technical and executive stakeholders on threats, incidents, and security posture.QualificationsBachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience).3-4 years of hands-on experience in security operations, incident response, or threat detection roles.Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment.Strong grasp of attacker tradecraft — phishing, ransomware, lateral movement, privilege escalation, C2 — and the MITRE ATT&CK framework.Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths.Scripting ability in Python or PowerShell for automation, log analysis, and tooling.Strong incident documentation, communication, and stakeholder-briefing skills.Tools & Technologies You Will UseSIEM & detection: Splunk (SPL), Microsoft Sentinel (KQL), Elastic Security, QRadar; Sigma rules.EDR/XDR & response: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne; SOAR platforms (Splunk SOAR, Sentinel playbooks, Cortex XSOAR).Cloud & identity security: AWS (GuardDuty, Security Hub, CloudTrail), Azure (Defender for Cloud, Entra ID), Okta; CSPM tools (Wiz, Prisma Cloud exposure a plus).Vulnerability & analysis: Tenable Nessus, Qualys, Rapid7; Wireshark, Sysinternals; threat intel platforms (MISP, Recorded Future exposure a plus).Automation: Python, PowerShell, REST APIs.Preferred SkillsDetection-engineering experience — building detections-as-code, tuning for false-positive reduction.Purple-team or adversary-emulation exposure (Atomic Red Team, Caldera).Digital forensics fundamentals (memory, disk, log timeline analysis).Exposure to compliance-driven environments (SOC 2, HIPAA, PCI DSS, NIST CSF).Certifications such as CISSP, GIAC (GCIH, GCIA, GCFA), CySA+, Microsoft SC-200, Splunk Core Certified, or AWS Security Specialty are a plus.Container & IaC security — Kubernetes/EKS/AKS runtime threats, image scanning, Terraform misconfig detectionIR framework & SOC metrics — NIST 800-61 lifecycle, MTTD/MTTR, ATT&CK coverage measurementAbout Clinisol Tech Inc.Clinisol Tech Inc connects businesses with skilled professionals who drive results. We combine industry expertise with a personalized approach to deliver the right talent quickly and efficiently. Our mission is to accelerate careers and companies by connecting exceptional technology talent with innovative organizations that value people.