Cybersecurity Incident Response Team Security Analyst II

Jabil Circuit is hiring a Cybersecurity Incident Response Team Security Analyst II in Saint Petersburg, FL (onsite). This role supports advanced monitoring, investigation, and incident response across global operations, helping keep security tooling effective through reporting, analytics, and continuous improvement. You will also contribute to staff mentoring and operational readiness, including on-call coverage as required.

Responsibilities

• Support 24/7 global operations by responding to security events in the environment; on-call as required.
• Perform advanced monitoring of security events by studying and reviewing device security logs.
• Investigate events by correlating data from multiple sources to determine risk to Jabil.
• Conduct advanced incident analysis using logs and monitoring activities.
• Assist in large-scale incidents including investigation and response, and provide guidance on remediation.
• Create and refine log monitoring reports, searches, or basic investigative tools to strengthen monitoring capabilities.
• Handle escalations from SOC Security Analysts I.
• Analyze the environment, including activities such as port scans, activity monitoring, and intrusion detection.
• Perform intermediate-level Health Checks and routine administration for security tools.
• Differentiate between security events vs. incidents to initiate the appropriate incident response actions.
• Participate in IT security and customer audit activities.
• Provide mentoring and education for security staff members.
• Drive continuous improvement through trend reporting analysis and metrics management.
• Ensure procedures and work instructions remain efficient and not redundant.
• Identify and implement new analytic methods to detect threats more effectively.
• Maintain confidentiality in all security activities for both internal and customer-specific work.
• Interpret instructions provided in written, oral, diagram, or schedule form.
• Lead small projects or initiatives as assigned, and perform other duties as required.

Requirements

• Ability to define problems, collect data, establish facts, and draw valid conclusions.
• Ability to communicate analytical data to varied audiences, including executives.
• Strong interpersonal and leadership skills to influence and build credibility as a peer.
• Ability to perform under significant enterprise-wide pressure with a sense of urgency.
• 3+ years of experience, or a Bachelor’s degree in Computer Science, Information Systems, or related field plus 3-5 years Security Operations, Network Administration, or equivalent knowledge.
• Security related certifications: Security+, GSEC, or GCIH.
• Strong working knowledge of perimeter technologies such as firewalls and proxies.
• Strong working knowledge of security tools including SIEM, NetFlow, IDS/IPS, endpoint solutions, and DLP.
• Strong working knowledge of networking including TCP/IP, network architecture, and packet capture and analysis.
• Advanced technical knowledge of operating systems, network services, applications, and security logging.

Preferred Qualifications

• Master’s degree in Information Security, Cybersecurity, or Computer Network Defense.
• Relevant security certifications a plus: GCIA, GCED, GMON, CEH, CCNA, CySA+.
• Previous experience in scripting or programming (Python, PowerShell, PERL, Splunk SPL).
• Direct experience in an enterprise-level Cyber Incident Response Team or Security Operations Center.

Technologies

• Security+: GSEC, GCIH
• Firewalls, proxies
• SIEM, NetFlow, IDS/IPS
• Endpoint solutions, DLP
• TCP/IP, packet capture
• Python, PowerShell, PERL, Splunk SPL