IT Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Continuously monitor and assess security events across network, endpoint, and cloud environments utilizing Microsoft Sentinel.

• Analyze Microsoft 365 and Azure AD sign-in logs along with conditional access alerts to identify suspicious activities.

• Investigate and confirm potential security incidents, such as malware attacks, phishing attempts, unauthorized access, and other malicious actions.

• Triage, categorize, and prioritize security alerts effectively.

• Provide assistance with Cloudflare security management, encompassing DNS and bot protection incidents.

• Support the administration of 1Password, which includes onboarding and offboarding, vault organization, access reviews, and password/passkey management practices.

• Evaluate Azure security-score recommendations to enhance the organization's security posture.

• Contribute to KnowBe4 phishing and security awareness initiatives, involving campaigns, outcome tracking, training, and communications.

• Aid in conducting vulnerability and configuration assessments on Windows endpoints and SaaS platforms.

• Create documentation for security procedures, checklists, and how-to guides aimed at non-technical staff and volunteers.

• Engage in a targeted security project that aligns with the organization’s objectives.

• Assist with incident response activities, including evidence gathering, analysis, escalation, containment, and remediation.

• Correlate logs and security events from firewalls, IDS/IPS, web servers, endpoints, and cloud services.

• Leverage threat intelligence, indicators of compromise (IOCs), and adversary tactics, techniques, and procedures (TTPs) to enhance detection capabilities.

• Document investigations, findings from incidents, response actions, and lessons learned.

• Generate security metrics, reports, and operational summaries for stakeholders.

• Collaborate with Security Operations, IT, and cross-functional teams effectively.

• Keep abreast of emerging threats, attack techniques, vulnerabilities, and best practices in security.

• Perform additional job-related responsibilities as assigned.

• Report directly to the IT Operations/Security Architect.

⛳️ Requirements

• Strong comprehension of networking, operating systems (particularly Windows), and security principles, including MFA, phishing, and least privilege.

• Familiarity with Microsoft 365 and essential cloud concepts.

• Excellent communication skills and the ability to exercise patience when engaging with non-technical personnel.

• Demonstrated reliability, confidentiality, and integrity in handling sensitive information.

• An associate’s or bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent self-directed learning such as certifications or bootcamps.

• 1–2 years of experience in IT, Cybersecurity, or related fields.

• Proficiency with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password.

• Must be capable of working remotely within the United States.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Retirement savings plans with employer matching.

• Flexible work hours and remote work options.

• Professional development opportunities and training.

• Generous paid time off and holiday leave.