Information Security Analyst, I

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Monitor and assess alerts, events, and findings from security, endpoint, identity, email, network, and cloud-security platforms.

• Evaluate alerts to confirm findings, differentiate false positives from actionable occurrences, gather evidence, and document results.

• Escalate any suspicious, high-impact, or time-critical activities according to predefined criteria.

• Track investigations to their conclusion while maintaining precise case records, evidence, timelines, and decisions.

• Assist in investigations related to phishing, malware, credential compromise, anomalous authentication, endpoint detections, and unauthorized configuration changes.

• Correlate security and IT operations data to determine scope, impact, affected assets, impacted users, and probable root causes.

• Aid in containment, recovery, and post-incident activities.

• Uphold confidentiality and adhere to evidence-handling and documentation standards.

• Support security-control assessments, configuration reviews, and compliance evidence collection for BCS365 and client environments.

• Identify recurring control deficiencies, operational risks, and process vulnerabilities; communicate recommendations to management.

• Collaborate with Project and Helpdesk teams to coordinate risk mitigation actions, validate remediation efforts, and document results.

• Generate investigation notes, incident summaries, playbooks, knowledge articles, technical procedures, and reports for internal or customer use.

• Prepare updates and metrics on alert volume, incident trends, vulnerabilities, response performance, and recurring risks.

• Work with Helpdesk, Project, Infrastructure, Security, and client-facing teams to channel and resolve incidents and remediation tasks.

• Contribute to process improvement, detection tuning, automation, and knowledge sharing.

• Develop proficiency in BCS365 security platforms and advance toward independently investigating and resolving routine security events.

⛳️ Requirements

• Must be authorized to work in the U.S.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field; or equivalent relevant education, certifications, and/or experience.

• At least 3 years of experience in information security, IT operations, helpdesk support, system administration, network administration, or a related technical role.

• Technical background in supporting, administering, configuring, or troubleshooting the back end of various cloud security platforms or tools.

• Strong understanding of security principles, including confidentiality, integrity, availability, least privilege, defense in depth, and risk management.

• Solid understanding of common security events and threats, including phishing, malware, account compromise, suspicious authentication, endpoint detections, and vulnerability exploitation.

• Familiarity with Windows operating systems, endpoint management concepts, networking fundamentals, Active Directory or cloud identity concepts, and Microsoft 365 or similar SaaS environments.

• Ability to read and interpret logs, alerts, and technical data; organize evidence; and accurately document observations.

• Excellent written and verbal communication skills, with the capability to clearly explain technical findings to both technical and non-technical stakeholders.

• Proven attention to detail, sound judgment, ability to manage confidential information, and a commitment to following documented processes and escalation paths.

• Ability to prioritize multiple tasks, remain composed during time-sensitive situations, and collaborate effectively in a team-oriented, managed services environment.

• Previous experience working for an MSSP or MSP, or supporting multiple customer environments in a client-facing security role.

• Experience with one or more security platforms, such as SIEM, EDR/XDR, email security, vulnerability management, identity security, network security, or security awareness tools.

• Exposure to incident response processes, ticketing systems, managed service operations, and IT documentation standards.

• Working knowledge of common security and compliance frameworks, such as NIST Cybersecurity Framework, CIS Controls, ISO 27001, HIPAA, PCI DSS, or SOC 2.

• Relevant security certifications, such as CompTIA Security+, Microsoft security certifications, or other vendor-specific cloud-security certifications.

• Basic scripting or query skills—for instance, PowerShell, KQL, SQL, or Python—used for investigation, reporting, or task automation.

• Experience supporting, administering, configuring, or troubleshooting the backend of Microsoft Entra and/or Crowdstrike.

• May be required to provide scheduled support during holidays or outside of regular business hours, as business and client needs dictate.

• Must be able to work with sensitive client, employee, and security information while following BCS365 confidentiality, acceptable use, and security policies.

• Must be able to communicate effectively using standard business communication tools.

🏝️ Benefits

• Insurance Coverage: Health, Dental, Vision, Life/AD&D, Short-Term Disability, Long-Term Disability, Accident, Hospital Indemnity, Critical Illness, Cancer Indemnity

• Paid Time Off (Vacation, Holidays, Birthday)

• 401k Retirement Plan with Company Match

• Flexible Spending Account, Health Savings Account

• Paid Parental Leave

• Peer-to-Peer Recognition

• Learning and Development

• Pet Insurance

• Fun On and Off-Site Events

• Referral Bonus Program

• Employee Assistance Program