IT Cybersecurity Analyst

As a front-line IT cybersecurity defender, this role focuses on monitoring, threat detection, security engineering, and incident response across enterprise systems and networks.

Key Responsibilities

• Continuously monitor enterprise networks, SIEM dashboards, and security alerts for indicators of compromise and anomaly patterns
• Review device, application, and infrastructure logs to detect suspicious behavior
• Prioritize and escalate security issues based on impact and urgency
• Act as first responder for security events by containing, mitigating, and documenting incidents
• Conduct forensic investigations to identify root cause, attack vector, and affected systems
• Collaborate with IT and leadership on post-incident remediation
• Run vulnerability scanning, static and dynamic analysis, and penetration testing using enterprise tools
• Perform regular risk assessments to identify and rank exposure across applications, cloud systems, and infrastructure
• Coordinate with system owners to ensure vulnerabilities are remediated
• Support administration of security tools including SIEM, EDR, IPS/IDS, vulnerability scanners, and data security platforms
• Partner with cross-functional teams to interpret scan results and implement security controls
• Assist in designing and strengthening enterprise security architecture
• Contribute to development, documentation, and enforcement of security policies and procedures
• Ensure alignment with NIST, ISO 27001, CIS Controls, and applicable regulatory obligations
• Participate in security control assessments, audits, and compliance reporting
• Deliver training to promote secure behavior and reduce organizational risk
• Provide technical guidance on secure development and data handling best practices
• Work with cloud, networking, and application teams to embed security across operations
• Support digital modernization efforts, including cloud migration and security automation
• Support third-party risk assessment and security program activities

Requirements

• Hands-on experience with enterprise security tools such as SIEM, EDR, firewalls, and vulnerability scanners
• Knowledge of malware analysis, threat modeling, identity and access management, encryption, and logging standards
• Familiarity with cloud security (Azure, AWS, or GCP) and modern attack frameworks (MITRE ATT&CK)
• Proficiency in network security concepts and protocols
• Strong analytical thinking and problem solving (core hiring requirement)
• Excellent communication skills for articulating risks and recommendations to technical and non-technical audiences
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent work experience
• 1+ year of experience in IT, help desk, or cybersecurity (internships and hands-on lab experience considered)
• Preferred certifications: Security+, CySA+, CEH, SSCP, or Microsoft Cybersecurity Analyst credentials, or willingness to obtain
• Experience with application security, vulnerability management programs, or governance/risk/compliance (GRC) processes
• Experience analyzing data transfer security and third-party application risk
• Knowledge of incident response frameworks and digital forensics methodologies
• Ability to participate in on-call rotation or after-hours incident handling as required
• Hybrid or remote flexibility based on organizational policy

Tools & Technologies

• SIEM, EDR, firewalls, vulnerability scanners, IPS/IDS, data security platforms
• Static/dynamic analysis, penetration testing
• NIST, ISO 27001, CIS Controls
• Azure, AWS, GCP
• MITRE ATT&CK
• Malware analysis, threat modeling, identity and access management, encryption, logging standards
• Network security concepts and protocols

Work Location

• Sarasota, FL (hybrid)