Cyber Security Analyst

Position Overview

The Cybersecurity Analyst is responsible for safeguarding organizational systems and data by detecting, analyzing, and responding to cybersecurity threats. This role requires hands-on expertise in security and log analysis, incident response, and triage, as well as experience with Trellix solutions, PCI DSS assessments, and SIEM platforms such as Helix, SolarWinds, and Splunk. Familiarity with NIST 800-53 and NIST 800-35 frameworks is essential.

This position also requires a foundational understanding of IT infrastructure, as the analyst will closely partner with the Infrastructure team to ensure end-to-end system security.

Key Responsibilities

• Conduct real-time security monitoring and log analysis to identify potential threats and anomalies.
• Perform incident response activities including triage, investigation, containment, eradication, and recovery.
• Manage and tune SIEM platforms (Helix, SolarWinds, Splunk) to ensure effective event correlation and alert accuracy.
• Utilize Trellix security solutions (e.g., ETP, EDR, Helix) for threat detection, response, and endpoint protection.
• Conduct PCI DSS assessments and support remediation to ensure compliance with regulatory and industry standards.
• Develop and maintain incident response plans, playbooks, and post-incident reporting in alignment with NIST 800-53 / 800-35.
• Perform root cause analysis and recommend proactive measures to reduce risk exposure.
• Collaborate with cross-functional IT and Infrastructure teams to improve the organization's overall security posture.
• Participate in a rotational weekly on-call schedule to support after-hours IT support and security.
• Create detailed reports and metrics on incidents, vulnerabilities, and compliance performance.
• Stay current on evolving threat landscapes, tools, and cybersecurity frameworks.

Required Skills and Qualifications

Preferred Qualifications