Tier 1 Security

Tier 1 Security Cybersecurity Jobs

4 jobs found

Today

IT Statewide Infosec Associate Analyst 1, 2

Nunez Community College Baton Rouge, LA

Baton Rouge, LA

Today

Full time Crowdstrike Cybersecurity Tools Incident Response

Apply Now

Job Description

At Nunez Community College, the Office of Technology Services (OTS) Information Security Team needs an associate analyst to help monitor and respond to cyber threats across the enterprise. In this onsite role in Baton Rouge, you will support centralized security alert triage, help coordinate incident response activities, and provide technical support across computer systems, applications, and networks.

What you’ll do

Monitor, triage, and investigate real-time security alerts generated through Palo Alto Networks Cortex XSIAM and CrowdStrike Falcon Complete.
Validate high-priority threat notifications, evaluate context, and perform initial containment actions aligned to enterprise incident response playbooks.
Coordinate remediation workflows with the CrowdStrike Falcon Complete managed service team and relevant OTS technical verticals.
Document investigation findings, root cause analyses, and response actions in the centralized security incident log.
Assist in tuning detection logic, correlation rules, and automated response playbooks within Cortex XSIAM to reduce false positives.
Monitor and manage the ServiceNow ticketing queue for proxy-related issues, access requests, and categorized URL reclassification tickets.
Troubleshoot and resolve web filtering issues, SSL/TLS decryption exceptions, and SWG (secure web gateway) connection anomalies for enterprise users.
Analyze user traffic patterns against acceptable use policies to identify policy violations, unauthorized application usage, or potential evasion attempts.
Maintain operational documentation and standard operating procedures (SOPs) for enterprise proxy management and ticket workflows.
Investigate suspicious internal and perimeter network activity, protocol anomalies, and anomalous host behavior using network telemetry and log sources.
Conduct proactive threat hunting using threat intelligence indicators (IoCs) and behavioral analytics to identify potential adversary activity (TTPs).
Correlate disparate log sources (firewall, DNS, VPN, authentication, and endpoint logs) to reconstruct attack timelines and assess scope of impact.
Escalate confirmed intrusions or advanced persistent threats (APTs) to senior incident response personnel and OTS leadership.
Monitor identity provider signals and behavioral analytics for indicators of compromised credentials, impossible travel, and unauthorized account modifications.
Coordinate with the OTS Service Desk and identity teams to initiate account locks, password resets, session revocations, and MFA step-up authentication for compromised users.
Verify post-compromise cleanup actions, ensuring persistent access mechanisms (including malicious inbox forwarding rules and unauthorized OAuth applications) are identified and removed.
Advise agency points of contact and help desk personnel on best practices for user remediation and credential hygiene.
Perform other tasks, special projects, analysis, studies, and plans as directed by OTS Leadership.

Required experience and education

Two years of experience in information technology; OR
Six years of full-time work experience in any field; OR
An associate’s degree in information technology; OR
A bachelor’s degree.

A certification in an approved area may be substituted for the education and/or experience requirements at the time of hire or promotion, provided the appointment is made from a Certificate of Eligibles.

Additional minimum qualification rules: Every 30 semester hours earned from an accredited college or university will be credited as one year of experience toward the six years of full-time work experience requirement in any field. The maximum substitution allowed is 120 semester hours, substituting for a maximum of four years of experience. The note about approved certifications and a Certificate of Eligibles also applies for hiring or promotion.

Technologies you’ll work with

Palo Alto Networks Cortex XSIAM
CrowdStrike Falcon Complete
ServiceNow
SSL/TLS
Secure web gateway (SWG)
IoCs
TTPs
OAuth

Role details

Appointment type: Filled by new hire or by promotion of a current permanent status classified employee.
Career progression: Participates in a career progression group and may be filled from this recruitment as an IT Infosec Associate Analyst 1 or 2.

How to apply

No Civil Service test score is required for consideration.
Click the Apply link above and complete the electronic application.

Background checks and eligibility

Prior to a new hire, a background check including criminal record history will be conducted.
Prospective employees may be subject to pre-employment drug testing.
New hires will be subject to employment eligibility verification via the federal government’s E-Verify system.

The official job specifications for this role, as defined by the State Civil Service, can be found via the job specification link provided with the posting.

View full job page →

1d ago

Security Analyst II

Professional Search Group, Inc. Cleveland, OH

Cleveland, OH

1d ago

Full time Cybersecurity Tools Data Security Endpoint Security

Apply Now

Job Description

Support security investigations and first-line response across email, identity, endpoint, and network environments.

Responsibilities

Investigate security alerts spanning email security, identity, endpoint, firewall, VPN, and wireless systems
Perform first-line incident response, including initial scoping, evidence collection, and containment using established runbooks
Handle user-reported phishing via the Proofpoint reporting workflow and follow up with reporters
Escalate confirmed incidents with clear, documented findings
Contribute to detection rule and alert notification tuning so valid detections reach the right team
Assist with security configuration reviews and close identified gaps across email, identity, and endpoint controls
Maintain and extend CrowdStrike Fusion SOAR triage automation
Track hardening activities through completion and keep task status visible
Assist with firewall rule reviews, change preparation, and documentation
Support VPN operations and access-related tasks
Maintain network diagrams, inventory, and monitoring
Support configuration backups, health checks, and routine maintenance
Maintain runbooks, SOPs, and troubleshooting guides
Document incidents, investigations, and changes accurately for later reference and reporting
Use approved AI tooling to accelerate analysis, drafting, and research

Requirements

2 to 4 years of hands-on experience in security operations, IT security, or a closely related role
Working knowledge of IP addressing, subnets, routing, and VLANs, including how firewalls and VPNs operate in an enterprise network
Hands-on experience investigating security alerts and reviewing logs from email, identity, endpoint, or firewall systems
Familiarity with SIEM and EDR concepts and the phases of incident response
Ability to run first-line investigation and response with limited supervision
Strong written communication for incident documentation and reporting
Ability to use AI tools such as Claude for analysis, research, and documentation

Technologies

Proofpoint
Microsoft 365
Entra ID
Okta
CrowdStrike Falcon
NG-SIEM
EDR
Fusion SOAR
Palo Alto firewalls
GlobalProtect VPN
Arista switches
Ruckus wireless
Zabbix
syslog
Oxidized
Claude
AI assistant

Preferred (Not Required)

Direct experience with Proofpoint, Okta, Microsoft 365 security, CrowdStrike, or Palo Alto Networks
Scripting with Python or PowerShell
Exposure to SOAR or other security automation
Linux and command-line familiarity
Security certifications such as Security+, CySA+, or equivalent

Growth Path

Senior Security Analyst
Security Engineer

Location: Cleveland, OH (onsite)

Minimum Experience: 2 years

View full job page →

2d ago

Information Security Analyst I

Onvida Health Yuma, AZ

Yuma, AZ

2d ago

$72k - $108k/yr Full time Cyber Security Cybersecurity Analysis Cybersecurity Tools

Apply Now

Job Description

Onvida Health is hiring an Information Security Analyst I to support day-to-day security monitoring and help keep security processes running smoothly. This entry-to-developing role focuses on observing security alerts, performing initial triage, and carrying out standard procedures that align to NIST CSF 2.0 and HIPAA Security Rule expectations.

The analyst will work onsite in Yuma, Arizona, contributing to SIEM monitoring, identity hygiene, and incident support activities under defined decision rights. The position emphasizes documentation, escalation of suspicious activity, and collaboration with IT and service desk staff for straightforward security remediation.

What you will do

Monitor security alerts and events, complete initial triage, and document findings using standard operating procedures.
Perform basic SIEM log reviews to identify anomalies and escalate potential incidents to senior analysts.
Carry out assigned identity hygiene tasks such as AD hygiene report reviews, privileged access reviews, or MFA coverage checks, following guidance.
Support incident response by performing directed data collection, updating tickets, and preserving evidence.
Maintain accurate documentation including runbooks and case notes for investigations, alerts, and routine tasks.
Collaborate with IT and service desk staff to address simple security-related requests and remediation actions.
Execute predefined monitoring and investigation tasks, escalating suspicious or ambiguous activity to Analyst II or the Information Security Manager.
Work within defined decision rights, without owning enterprise metrics or making independent risk-acceptance decisions.

Required skills and background

0-1+ years of related IT, help desk, SOC, or similar technical experience.
Associate's Degree.
Entry-level security certifications (examples: Security+, SSCP, SEC1, or CJCA) are preferred; pass one of the above within 12 months of starting the role.
Systems Security Certified Practitioner.

Tools and frameworks you will work with

SIEM
AD hygiene reports
AD
MFA
NIST CSF 2.0
HIPAA Security Rule

Work schedule and location

Regular full time position
80.00 hours every two weeks
Shift: Days
Onsite at the Corporate Center
Location: 399 West 32nd Street, Yuma, AZ 85364, United States

Compensation

Salary range: USD 71,705 - 107,557 per year
Base pay range offered: Min $71,705.24 | Mid $89,631.55 | Max $107,557.86

Physical requirements and working conditions for this position will be provided to you upon interview.

View full job page →

1mo ago

Cybersecurity Analyst Level 1

Kotori Technologies, LLC Greenville, SC 🇺🇸 Remote

Greenville, SC

1mo ago Closed

$60k - $75k/yr Full time Application Support Business Systems Cis Controls

This position is no longer accepting applications (closed Sep 20, 2026).

Job Description

Support client security environments in an MSP setting while building toward deeper assessment and compliance ownership across multiple customers.

Responsibilities

Monitor, support, and assist with managing client security environments across multiple customer networks
Participate in client calls for security implementations, ongoing support, remediation efforts, and compliance initiatives
Identify, document, and track security risks, vulnerabilities, remediation tasks, and control gaps
Perform basic security assessments and contribute to gap analysis for client environments
Assist with implementing security controls across endpoints, Microsoft 365, and network environments
Provide practical security guidance to clients, including hardening recommendations, MFA adoption, policy adherence, and secure configuration practices
Support implementation and management of cybersecurity frameworks such as CMMC, NIST SP 800-171, CIS Controls, and other standards required by clients or recognized in the industry
Assist with remediation tracking and help validate control effectiveness
Contribute to compliance documentation, procedural records, and evidence collection activities
Over time, develop the ability to lead security assessments and own compliance engagements across multiple clients
Support Tier 1 and Tier 2 technicians during high-volume periods, including common end-user issues such as printers, applications, networking, and system performance
Escalate service or project issues that cannot be completed within agreed service levels
Document internal processes and procedures related to assigned duties and responsibilities
Enter time, expenses, service work, and project work in ConnectWise as required
Work through project tickets and project phases in ConnectWise as assigned by a Project Manager
Complete assigned ConnectWise University training materials and blueprints to learn internal processes and workflows
Review cybersecurity publications and online resources to stay current on emerging security technologies, risks, and best practices

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (preferred)
Master’s degree preferred but not required
2 to 5 years of general IT experience preferred
1 to 2 years of cybersecurity experience preferred
Familiarity with CMMC, NIST SP 800-171, CIS Controls, or similar cybersecurity and compliance frameworks
Professional IT or cybersecurity certifications preferred, such as CompTIA Security+, ISC2, or other applicable industry-recognized certifications
CompTIA Security+ preferred, or required within 6 to 12 months if not already obtained
CCP certification preferred, or required within 6 to 12 months if not already obtained
Strong interpersonal skills, including communication, active listening, client service, and professional phone communication
Ability to diagnose and troubleshoot technical issues across common end-user, endpoint, application, and networking scenarios
Ability to multitask, adapt quickly to changing priorities, and work effectively in a fast-moving MSP environment
Technical awareness and judgment to match resources to technical issues and client needs
Understanding of IT support tools, service delivery processes, and how technology is used to provide managed IT services
Service awareness of key IT services and the ability to understand how IT relates to a client’s business strategy and goals
Strong documentation and typing skills to ensure quick and accurate entry of service request details, time entries, and project updates
Self-motivated, team-oriented, and able to communicate effectively with clients, technicians, project managers, and internal leadership

Tools & Technologies

Microsoft 365
CMMC
NIST SP 800-171
CIS Controls
ConnectWise
ConnectWise University
CompTIA Security+
ISC2
MFA

Benefits

401(k) matching
Dental insurance
Employee assistance program
Health insurance
Health savings account
Life insurance
Paid time off
Retirement plan
Vision insurance

Remote Work

Work from home (remote)
May require occasional travel to client sites

Location

South Carolina (remote)

Compensation

USD 60,000 - 75,000 per year

View full job page →

Tier 1 Security Cybersecurity Jobs

IT Statewide Infosec Associate Analyst 1, 2

Security Analyst II

Information Security Analyst I

Cybersecurity Analyst Level 1

Get Tier 1 Security Cybersecurity Jobs alerts