Senior Cybersecurity Analyst

Description

A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives.

This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture.

Position Overview

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
• Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
• Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
• Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
• Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
• Create and maintain security procedures, runbooks, metrics, and technical documentation.
• Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Requirements

• 3+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying Kusto Query Language (KQL) queries.
• Knowledge of security frameworks such as NIST, CIS Controls, or similar industry standards.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
• Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
• Strong analytical, troubleshooting, and investigative skills.
• Ability to effectively communicate with both technical and non-technical stakeholders.
• Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
• Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent are preferred.