Cyber Security Analyst

Cyber Security Analyst

The Cyber Security Analyst is responsible for the day-to-day operation, administration, and continuous improvement of OmniTRAX cybersecurity technologies, processes, and controls. This role monitors security events and threat activity; investigates and responds to incidents; supports vulnerability identification and remediation efforts; and assists in the development, implementation, and maintenance of security policies, standards, and procedures. Working closely with infrastructure, application, and business teams, the Cyber Security Analyst helps safeguard company systems, information assets, and business operations across all cybersecurity concerns. This role requires a hands-on, service-oriented professional who can balance operational response, risk reduction, technical troubleshooting, documentation, and cross-functional collaboration.

The Cyber Security Analyst demonstrates and adheres to the company values of safety, honesty, ownership, respect, and teamwork to ensure a successful partnership with customers and employees that result in OmniTRAX's continued success.

Essential Responsibilities

• Monitor, administer, and maintain cybersecurity tools and platforms used to protect endpoints, identities, email, cloud services, networks, and company data.
• Review, investigate, and triage security alerts, suspicious activity, and reported events; escalate issues appropriately and coordinate containment, remediation, and recovery activities.
• Participate in incident response activities, including evidence gathering, documentation, communication, root-cause analysis support, and follow-up corrective actions.
• Perform day-to-day security operations tasks such as alert monitoring, log review, case tracking, ticket management, and operational reporting.
• Support the administration and tuning of security technologies such as endpoint protection, email security, SIEM/logging, vulnerability management, multi-factor authentication, identity security, and related defensive controls.
• Assist with vulnerability identification, prioritization, validation, and remediation follow-up in coordination with infrastructure, application, and business stakeholders.
• Help identify cybersecurity weaknesses, recurring issues, and process gaps; recommend practical improvements that strengthen protection, visibility, and response readiness.
• Assist in creating, updating, and maintaining cybersecurity policies, standards, procedures, playbooks, diagrams, inventories, and other operational documentation.
• Support access control and identity security activities, including account reviews, privileged access considerations, MFA enforcement support, and general security hygiene practices.
• Contribute to phishing response, security awareness reinforcement, and user guidance related to suspicious emails, unsafe behavior, and common security risks.
• Coordinate with internal IT teams, business stakeholders, and third-party vendors or service providers to support security initiatives, investigations, and remediation plans.
• Assist with internal and external audit requests, compliance support activities, exception tracking, evidence collection, and control documentation as needed.
• Prepare metrics, dashboards, or summary reporting related to incidents, vulnerabilities, tool health, trends, and operational performance for technology leadership.
• Maintain current knowledge of emerging threats, vulnerabilities, attacker techniques, and cybersecurity best practices relevant to OmniTRAX's environment.
• Participate in after-hours response activities and provide support for critical cybersecurity incidents outside normal business hours when required.

Other Duties

• Maintain knowledge about current and emerging technologies, threats, and defensive practices that may benefit the company.
• Participate in cybersecurity and technology projects, including implementation, rollout, testing, hardening, and operational transition activities.
• Perform other duties and projects as assigned.

Supervisory Responsibilities

• None

Required Qualifications, Knowledge, Skills, and Abilities

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; equivalent combination of education and relevant experience may be considered.
• 4+ years of experience in cybersecurity, information security, security operations, IT infrastructure/security administration, or a related role.
• Hands-on experience supporting and operating cybersecurity technologies in one or more of the following areas: endpoint security, Microsoft 365 security, identity and access security, SIEM/log management, email security, vulnerability management, network/security monitoring, or incident response.
• Working knowledge of core security principles, including least privilege, defense in depth, vulnerability management, secure configuration, identity protection, and incident response practices.
• Ability to investigate alerts, analyze technical issues, determine probable cause, and coordinate timely corrective action with appropriate stakeholders.
• Familiarity with Microsoft enterprise technologies and cloud environments, including Active Directory, Azure/Entra, Microsoft 365, and security-related administration concepts.
• Understanding of networking fundamentals and common protocols, including TCP/IP, DNS, DHCP, VPN, Wi-Fi, and firewall/security concepts.
• Strong analytical, troubleshooting, organizational, and problem-solving skills with attention to detail and documentation quality.
• Ability to manage multiple priorities, work independently, and respond effectively in situations requiring urgency and sound judgment.
• Excellent verbal and written communication skills, with the ability to explain technical risk and recommended actions to non-technical stakeholders.
• Professional integrity, accountability, discretion, and a customer-service mindset.

Preferred Qualifications, Knowledge, Skills, and Abilities

• Experience with security technologies such as Microsoft Defender, Barracuda, Okta, Entra ID, TrendMicro, or related platforms.
• Experience supporting phishing response, security awareness platforms, vulnerability remediation coordination, and policy/procedure development.
• Exposure to security frameworks and control concepts such as NIST CSF, CIS Controls, or similar best-practice standards.
• Experience working with managed security partners, third-party vendors, or external auditors.
• Experience in transportation, logistics, industrial, real estate, or other multi-site operating environments.

Preferred Certifications and Licenses

• Comp Industry certification such as CompTIA Security+, CySA+, SSCP, SC-200, SC-300, SC-900, GSEC, or a comparable cybersecurity certification.

Work Environment

• Onsite at the Corporate Office four days per week (Monday – Thursday). Onsite requirements are subject to change at any time.
• Work in a climate-controlled office and routinely use standard office equipment

Travel

• Up to 5%, as business requires

Compensation

• Estimated Starting Annual Salary: $101,368.00
• Exact starting salary is determined by merit; seniority; geographic location; education, training, and/or experience related to job duties and responsibilities
• FLSA Status: Exempt, Not Eligible for Overtime
• Eligible for Participation - Annual Discretionary Bonus

Benefits

• 401(k) / 401(k) matching • AD&D insurance • Dental insurance • Disability insurance • Employee assistance program • Health insurance • Health savings account • Life insurance • Mental wellbeing resources • Paid Maternity leave • Paid Parental leave • Referral program • Relocation assistance • Sick time • Vacation time • Vision insurance

Physical Requirements

Physical Requirements - % of Work Time

Remain in a seated position - 80%

Speak and hear clearly - 100%

Lift office products and supplies, up to 20 lbs. - 20%

Stoop, kneel, bend and reach - 10%

Dexterity to write and manipulate keyboard and mouse - 100%