IT Cybersecurity Analyst

This position is ideal for candidates who are passionate about enterprise systems management and cybersecurity and eager to grow their skills in a hands-on, collaborative environment. You'll assist in monitoring, analyzing and responding to security threats, identifying and mitigating vulnerabilities at scale, and implementing security-related configurations, while gaining exposure to various tools and best practices in the cybersecurity landscape. The candidate should be detail-oriented, possess the ability and determination to learn and grow through mentorship, and follow guidance on implementations and operations while adhering to best practices and change management requirements.

• Monitor and analyze security alerts and logs from various sources, including SIEM.
• Assist with incident response activities, including investigation, documentation, and remediation.
• Perform routine security checks on systems, networks, and applications.
• Assist in managing user access reviews, endpoint protection, and vulnerability scans.
• Design and implement various security policies, procedures, and best practices.
• Monitors and remediates configuration policy requirements across the technology estate.
• Participate in security audits and help ensure compliance with industry regulations and frameworks (e.g., ISO 27001, NIST, CIS).
• Contribute to the development and enactment of security awareness materials and training initiatives.
• Stay up to date on current security trends, vulnerabilities, and threat landscapes.
• Ensure change management policies are followed while maintaining or deploying security solutions.
• Perform other duties as required.

• 2-4 years in a Cybersecurity and/or Systems Administration role
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field - or equivalent practical experience.
• CompTIA Security+ (strongly preferred)
• Cloud-related Systems Administration (strongly preferred)
• Proficient with networking concepts (TCP/IP, DNS, firewalls, VPNs).
• Proficient with server and client operating systems (Windows, Linux) provisioning and administration.
• Exposure to working in a hybrid infrastructure including on-premises and cloud-hosted topologies. (IaaS, PaaS, and SaaS)
• Understanding of common security concepts such as phishing, malware, ransomware, and social engineering.
• Understanding of authentication and access control principles.
• Experience working with SOC, vulnerability management, endpoint protection, and CASB solutions.
• Familiarity with scripting languages (e.g., PowerShell, Python, or Bash) is a plus.
• Knowledge of cloud platforms (e.g., AWS, Azure, or Google Cloud) and their security principles.
• Ability to work 3 days a week in the office.