Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct investigations, analyses, and responses to cybersecurity incidents within network environments or enclaves.

• Examine data from IDS, firewalls, endpoint protection technologies, network traffic logs, Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, and Defender for Office 365.

• Oversee, investigate, and address security alerts, incidents, and suspicious activities across enterprise environments.

• Interpret, analyze, document, and report events and anomalies in accordance with computer network directives.

• Assess, test, recommend, coordinate, monitor, and uphold cybersecurity policies, procedures, and systems.

• Manage access for hardware, firmware, software, and cloud services.

• Align cybersecurity strategies, controls, processes, standards, policies, and procedures with organizational and regulatory requirements.

• Identify security vulnerabilities and exposures, ascertain causes of security breaches, and suggest corrective measures.

• Assist in the implementation and administration of Microsoft Purview solutions, including DLP, Information Protection, Sensitivity Labels, Insider Risk Management, and data governance controls.

• Formulate techniques and procedures for cybersecurity risk assessments, compliance audits, threat investigations, and security impact evaluations.

• Investigate and respond to incidents involving unauthorized access, malware, phishing, data exfiltration, insider threats, fraud, attacks, or information leaks.

• Collaborate with technical and business stakeholders to enhance detection, incident response, and security operations.

• Mentor and provide guidance to less-experienced professionals.

⛳️ Requirements

• A minimum of 5 years of relevant experience in cybersecurity, information security, security operations, incident response, cyber defense, or related fields.

• Relevant technical training, certification(s), or a degree.

• Proficiency in Identity Access Management (IAM), security monitoring, security requirements, security technologies, and vulnerability assessments.

• Experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps.

• Familiarity with Microsoft Purview Data Loss Prevention (DLP), Insider Risk Management, Information Protection, and Data Lifecycle Management.

• Experience in investigating security incidents across cloud, endpoint, identity, email, and collaboration environments.

• Knowledgeable in threat hunting, incident response, log analysis, and detection engineering.

• Experience with SIEM and SOAR technologies, including Microsoft Sentinel.

• Understanding of NIST, RMF, CMMC, FedRAMP, CIS Controls, or ISO 27001.

• US citizenship is not a requirement.

• Preferred relevant certifications include Security+, CySA+, CISSP, GIAC, SC-200, SC-300, SC-400, or equivalent certifications.

🏝️ Benefits

• Options for medical plans, including some with Health Savings Accounts.

• Choices for dental plans.

• Vision plan availability.

• 401(k) plan featuring pre-tax and post-tax contributions along with company matching.

• Flexibility in work weeks when possible.

• Paid time off for vacation, sickness, and personal days.

• Paid holidays.

• Paid parental leave.

• Paid military leave.

• Paid bereavement leave.

• Paid jury duty leave.

• Up to 160 hours of paid family leave within a rolling 12-month period for eligible employees.

• Short- and long-term disability benefits.

• Life insurance coverage.

• Accidental death and dismemberment insurance.

• Personal accident insurance.

• Critical illness insurance.

• Business travel and accident insurance.

• Identity verification utilizing advanced biometrics and artificial intelligence.