Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and evaluate security alerts and events across SIEM, EDR, email, network, identity, and cloud security solutions.

• Assess and investigate phishing attempts, compromised accounts, malware incidents, unauthorized access, and unusual system or network behaviors.

• Assist in incident response by facilitating containment, gathering evidence, developing timelines, documenting findings, and coordinating with impacted teams.

• Analyze and correlate logs and security activities across various systems, networks, endpoints, identity platforms, and cloud settings.

• Aid in vulnerability management by conducting scans, validating results, analyzing findings, tracking remediation efforts, and collaborating with IT teams.

• Create, fine-tune, test, and uphold detection rules, alert logic, and security monitoring use cases.

• Support operations related to identity and access management security, including responses to compromised identities and activities related to MFA.

• Coordinate with MDR providers and external cybersecurity partners for investigations, escalations, and responses.

• Maintain thorough records of investigations, incident tickets, operational documentation, and runbooks.

• Generate metrics and reports for cybersecurity operations to identify trends and support program enhancements.

• Engage in incident response exercises, tabletop scenarios, post-incident reviews, and initiatives aimed at cybersecurity improvements.

• Leverage artificial intelligence, automation, scripting, and other technologies to enhance analysis, investigations, monitoring, reporting, documentation, and workflow efficiency.

• Identify areas for improvement in cybersecurity workflows, detection capabilities, documentation, and response processes.

• Collaborate with cybersecurity engineers, IT teams, external security partners, and campus stakeholders to safeguard Maine's public universities.

⛳️ Requirements

• A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, or an equivalent combination of education and experience.

• A minimum of five years of experience in information technology, cybersecurity operations, information security, security analysis, or a related area.

• Proven experience in conducting cybersecurity analysis utilizing security monitoring, incident response, vulnerability management, endpoint security, identity security, or related technologies.

• Familiarity with cybersecurity operations practices, including security monitoring, alert triage, incident response, threat detection, and vulnerability management.

• Practical knowledge of networking, operating systems, identity and access management, and cloud environments as they pertain to cybersecurity analysis and investigation.

• Ability to analyze logs, alerts, security events, and system activities to detect threats, unusual behavior, and unauthorized actions.

• Strong analytical, problem-solving, documentation, and communication capabilities.

• Capacity to effectively communicate cybersecurity information to both technical and non-technical audiences and collaborate across teams.

• Candidates must reside in and be authorized to work in the United States.

• U.S. work authorization must not require employer sponsorship at any point now or in the future.

• Applicants needing visa sponsorship or OPT extensions will not be considered.

• Preferred: relevant cybersecurity certifications such as CompTIA Security+, CompTIA CySA+, SSCP, Microsoft SC-200, GIAC Security Essentials (GSEC), or similar credentials.

• Preferred: experience in supporting incident response or security operations within a complex enterprise environment.

• Preferred: experience with scripting, automation, or orchestration in cybersecurity.

• Preferred: experience with an MDR provider, SOC, or external cybersecurity service provider.

• Preferred: experience in higher education, the public sector, or another complex multi-site setting.

• Preferred: experience using artificial intelligence or emerging technologies in cybersecurity operations.

🏝️ Benefits

• Comprehensive health benefits, including medical, dental, vision, flexible spending accounts (FSA), and Health Savings Account (HSA) options.

• Employer-paid basic life insurance and long-term disability coverage.

• Additional voluntary coverage options available.

• Retirement plan through TIAA with a 10% employer contribution.

• Additional tax-deferred retirement savings opportunities offered.

• Generous vacation and sick leave policies.

• 13 paid holidays each year.

• Tuition waiver program for employees, inclusive of graduate courses and Maine Law.

• Significant tuition discounts for eligible spouses and dependent children.

• Employee Assistance Program (EAP) available.

• Wellness programs to promote health and well-being.

• Opportunities for professional development.

• Career advancement possibilities within Maine's public universities.

• Pet insurance options available.

• Discounts on home and auto insurance.

• Supplemental disability and life insurance options offered.

• Fully remote position available.

• Benefits package valued at up to 50% of annual salary.