Job Description
Job DescriptionWe are looking for a Cybersecurity Analyst to help strengthen security operations and improve defensive capabilities across the organization. In this role, you will identify and investigate threats, enhance monitoring strategies, and support timely response to security events. This position is ideal for a hands-on, detail-oriented individual who can combine technical analysis, detection development, and cross-functional collaboration to protect enterprise systems and data.
Responsibilities:
• Oversee daily security event monitoring and assess alerts to identify potential threats, suspicious activity, and active incidents.
• Use Splunk to analyze logs, correlate events, and create meaningful detections that improve visibility across the environment.
• Design, refine, and maintain dashboards, searches, and alert logic to increase detection accuracy and reduce unnecessary noise.
• Apply the MITRE ATT& CK framework to strengthen threat analysis and develop detection content aligned to adversary behaviors.
• Support incident response efforts by assisting with investigation, containment, remediation, recovery, and lessons-learned activities.
• Document operational procedures, response playbooks, and technical workflows to promote consistency and readiness within security operations.
• Work with IT and business stakeholders to address control gaps, improve security processes, and enhance overall resilience.
• Develop reporting, metrics, and trend analysis to communicate risks, operational performance, and emerging concerns to stakeholders.
• Leverage Python, PowerShell, and automation techniques to streamline repetitive tasks and improve security operations efficiency.
• Review large volumes of security data to uncover patterns, emerging threats, and opportunities for more proactive defense.• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field with at least 3 years of cybersecurity experience, or an associate degree/equivalent technical training with 5 or more years of relevant experience.
• Demonstrated hands-on experience with Splunk, including query creation, search development, and security-focused analysis.
• Background in security operations, cyber monitoring, or incident response within an enterprise environment.
• Working knowledge of the MITRE ATT& CK framework and its use in threat detection and investigative analysis.
• Experience writing scripts in Python, PowerShell, or similar languages to support automation and operational improvements.
• Ability to investigate threats across endpoints, networks, cloud environments, web activity, and forensic data sources.
• Familiarity with security frameworks and regulated environments, including standards such as NIST 800-53.
• Strong analytical, communication, and collaboration skills, with the ability to manage multiple priorities effectively.