Cybersecurity Analyst

This is a fully remote position, open to applicants in Georgia.

📋 Description

• Oversee and assess security alerts across various technologies including identity, endpoint, email, network, cloud, application, vulnerability, and data protection.

• Authenticate, enhance, categorize, prioritize, and investigate security incidents.

• Examine phishing attempts, account breaches, malware, ransomware, unauthorized access, data leaks, insider threats, and third-party events.

• Implement authorized containment measures and liaise with Technology Operations for infrastructure-level or production modifications.

• Gather and secure evidence while assisting with eradication, recovery validation, enhanced monitoring, and incident resolution.

• Aggregate and analyze threat intelligence from commercial, governmental, industry, open-source, MDR, vendor, and internal sources.

• Evaluate threat actors, campaigns, tactics, techniques, and procedures (TTPs), indicators, exploited vulnerabilities, and targeted technologies.

• Develop intelligence products and operationalize insights through investigations, detections, hunting queries, watchlists, blocking measures, phishing simulations, and runbook updates.

• Perform MITRE ATT&CK-based threat hunts utilizing identity, endpoint, email, network, cloud, and application telemetry.

• Confirm vulnerability findings, evaluate risk and business exposure, prioritize remediation, detect exploitation, and escalate critical vulnerabilities.

• Collaborate with Security Engineering and coordinate remediation efforts with technology and application owners.

• Manage vulnerability ticket workflow, monitor service levels, report overdue exposures, and escalate ownership or delivery challenges.

• Create and sustain approved automation workflows, scripts, and playbooks.

• Maintain digital evidence following forensic, legal-hold, integrity, and chain-of-custody protocols.

• Keep comprehensive case records and verify containment and corrective measures.

• Assist in breach, identity, third-party, supply-chain, and AI-related security inquiries.

• Provide technical evidence to Legal and Privacy while refraining from independently determining legal privilege, regulatory interpretation, or notification obligations.

• Execute MDR monitoring, security metrics and reporting, case documentation, and sanctioned security-tool actions.

• Ensure structured handovers across operational regions.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field, or equivalent practical experience.

• Over 3 years of experience in cybersecurity operations, incident response, IT operations, system administration, network security, or a similar field.

• Proficiency in investigating alerts utilizing SIEM, EDR/XDR, identity, email, cloud, network, or vulnerability technologies.

• Knowledge of attacker techniques including phishing, malware, account compromise, privilege abuse, lateral movement, data exfiltration, and vulnerability exploitation.

• Experience in applying threat intelligence and incident telemetry for vulnerability prioritization and exploitation assessment.

• Familiarity with security automation or scripting, handling digital evidence, identity investigations, third-party incident analyses, and structured case management.

• Proficient with Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments.

• Understanding of MITRE ATT&CK and methodologies for detection, threat hunting, and incident response.

• Comprehension of vulnerability scanning and remediation processes along with ownership responsibilities.

• Knowledge of NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or obligations related to privacy and breach response.

• Capability to support designated US business-hour coverage and engage in an escalation or on-call rotation.

• Availability to assist with high-severity incidents outside of standard working hours as needed.

• Ability to manage confidential, legally sensitive, and security-restricted information appropriately.

• Applicants must have authorization to work for any employer in the U.S.; visa sponsorship is not available.

🏝️ Benefits

• Monthly bonuses.

• Restricted Stock Units for all new team members, vesting over 4 years.

• Full medical, dental, and vision benefits at no cost to the employee.

• Four weeks of paid time off.

• 9 paid float holidays.

• Five-week sabbatical after five years of employment.

• Pet medical insurance for one dog or cat at no cost.

• Paid time off to volunteer at nonprofit organizations.

• Free on-site gym.

• Free dog walking services for office pets during business hours.

• Free parking.

• Paid ORCA cards.