Cybersecurity Operations Analyst

Link Snacks is hiring a Cybersecurity Operations Analyst within its Global IT organization to support day-to-day cybersecurity monitoring and response. The role focuses on alert monitoring, investigation, incident support, and coordination across internal IT teams and external security providers.

Key Responsibilities

• Monitor, triage, investigate, and respond to cybersecurity alerts from SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms.
• Support the security operations environment, including Microsoft Sentinel SIEM operations, Data Collection Rules, data collectors, data sources, alert logic, and related components.
• Support and maintain MDR, EDR, AV, and other security tools across cloud, endpoint, and network security.
• Assist with incident response activities such as evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up.
• Identify security gaps and recommend improvements to organizational incident response processes, including playbooks, policies, and procedures.
• Create security incident reports and present them to business stakeholders, covering business impact, response actions, remediation status, and lessons learned.
• Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies.
• Support vulnerability management by reviewing scan results, validating findings, prioritizing remediation, tracking exceptions, and coordinating remediation with infrastructure, application, network, and OT teams.
• Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and guidance for secure configurations.
• Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely event resolution.
• Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating follow-up with vendors and internal stakeholders.
• Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use.
• Perform other duties as assigned.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
• 2+ years of hands-on experience in cybersecurity operations, security monitoring, incident response, vulnerability management, IT support, or related technical operations.
• Strong foundation in cybersecurity operations, including alert triage, incident response, endpoint security, identity security, phishing analysis, and vulnerability remediation support.
• Experience using ticketing systems, security consoles, endpoint tools, identity platforms, and basic scripting or query languages to investigate and document security issues.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra ID, Phosphorus, Tenable Nessus, or similar enterprise security technologies.
• Ability to analyze logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events, and vulnerability findings to support timely security decisions.
• Proven ability to investigate cybersecurity alerts, document findings, escalate risks, and support incident response activities accurately and in a timely manner.
• Working knowledge of vulnerability management, endpoint security, identity security, phishing response, access control, and common enterprise security technologies.
• Ability to manage cybersecurity support tickets, communicate status clearly, and coordinate remediation activities across technical teams.
• Experience working with security frameworks and standards such as ISO 27001, NIST, and SOC2.
• Capable of collaborating with security service providers, internal IT teams, vendors, and end users during security investigations and support requests.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with security technologies and tools, including SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies.
• Knowledgeable in security design, technical governance, and third-party auditing practices.
• Ability to communicate complex technical issues clearly to both technical and non-technical audiences.
• Demonstrated discretion in handling sensitive and confidential information.
• Strong adaptability, time management, and independent problem-solving skills.
• Ability to remain composed under pressure and provide after-hours support when necessary.
• Willingness to travel up to 10% for training and business-related activities.

Technologies

• SIEM, EDR, MDR
• Microsoft Sentinel, Microsoft Defender
• Data Collection Rules
• Microsoft 365 security tools
• Active Directory, Entra ID
• Phosphorus
• Tenable Nessus
• AV
• Ticketing systems, security consoles, endpoint tools
• Identity platforms, basic scripting or query languages
• ISO 27001, NIST, SOC2
• Power BI, Fabric
• BeyondTrust, Palo Alto, Cisco

Benefits

• Medical, dental and vision benefits
• Life and disability insurance
• 401k participation
• Paid holidays
• Paid time off
• Annual incentive and program-specific awards

Preferred Qualifications

• Experience with platforms such as Microsoft Sentinel, Microsoft Defender, Tenable Nessus, BeyondTrust, Palo Alto, Cisco, phishing analysis tools, or other cybersecurity operations technologies.
• Experience supporting security incidents from identification through containment, remediation, documentation, and closure.
• Cybersecurity certifications such as CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
• Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments.
• Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting.

Compensation and Additional Information

• Starting salary: USD 80,000 - 110,000 per year.
• Base pay is one component of Link Snacks Total Rewards for Team Members.
• Other rewards may include annual incentive and program-specific awards.

Location and Work Environment

Minneapolis, MN (onsite). The work environment is a plant/office setting with varying temperatures and noise levels. Exposure may include manufacturing equipment movement and wet or slippery floors, with most work performed in a climate-controlled office. Travel may be required.

Physical Demands

• Regularly required to sit, use hands to finger, handle, or feel, and talk or hear.
• Occasionally required to stand, walk, and reach with hands and arms.
• Must occasionally lift and/or move up to twenty-five pounds.
• Specific vision abilities required include close vision.