Senior Cybersecurity Analyst
Job Description
Robotics Technologies is seeking a Senior Cybersecurity Analyst to strengthen cybersecurity operations through threat detection, incident response, and data protection. This onsite role in Minneapolis, MN focuses on investigating incidents across multiple environments and improving monitoring and detection capabilities.
Role Scope
The Senior Cybersecurity Analyst will support ongoing security operations by monitoring SIEM activity, conducting investigations and threat hunting using KQL, and assisting with incident response activities. The position also contributes to security risk assessments, data protection initiatives, and documentation of security procedures and technical runbooks.
Responsibilities
- Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
- Monitor and maintain security event workflows within a SIEM environment, including alert triage, threat analysis, and incident escalation.
- Develop and leverage KQL queries for incident investigations, reporting, threat hunting, and detection tuning.
- Support incident response activities such as containment, remediation, recovery, and post-incident reviews.
- Improve security monitoring by reducing false positives, identifying monitoring gaps, and increasing detection coverage.
- Support data protection efforts including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
- Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
- Create and maintain security procedures, runbooks, metrics, and technical documentation.
- Collaborate with business stakeholders to communicate security risks, findings, and recommended improvements.
- Join an on-call rotation to support critical cybersecurity incidents.
Requirements
- 8+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
- Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
- Experience writing and modifying Kusto Query Language (KQL) queries.
- Knowledge of security frameworks such as NIST, CIS Controls, or similar standards.
- Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
- Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
- Strong analytical, troubleshooting, and investigative skills.
- Ability to communicate effectively with both technical and non-technical stakeholders.
- Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
- Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent preferred.
Technologies
- SIEM
- Microsoft Sentinel
- Kusto Query Language (KQL)
- NIST
- CIS Controls
- DLP
- eDiscovery
- Microsoft 365
- Security+
- CySA+
- SC-200
- SC-300
- CISSP
Job Details
- Location: Minneapolis, MN (onsite)
- Domain Exposure: Government
- Job ID: J53361
- Duration: 6 Months + Extension
- Employment Type: W-2, 1099, C2C
- Client: To Be Discussed Later
Work Authorization
- US Citizen
- Green Card
- OPT-EAD
- CPT
- H-1B
- H4-EAD
- L2-EAD
- GC-EAD