ETF Security Analyst I - State ID: 167130 |100% Remote | Current WI Residents Only | Due 10/21

ROLE TITLE: Security Analyst I

WORK ARRANGEMENT: 100% remote within Wisconsin or in the office. Candidates must be CURRENT Wisconsin residents. No relocation allowed.

Duration: 6+ months

DESCRIPTION

This entry-level role will serve as the first line of defense in monitoring our network, systems, and security tools. They will be responsible for reviewing Security Operation Center (SOC) dashboards, triaging incoming alerts, analyzing logs, reviewing vulnerabilities, and documenting incidents. This role is for cybersecurity professional looking to build a strong foundation in threat detection, incident response, and SOC operations.

Key Responsibilities

• SOC Tool Monitoring & Health: Regularly review and monitor Security Operation Center tools (such as SIEM, DLP tools, Web Application firewalls) to ensure operational health, proper log ingestion, and continuous visibility.
• Log & Alert Triaging: Monitor real-time security dashboards and system logs, perform initial triage on alerts, and escalate to senior BISM staff as needed to distinguish between false positives and legitimate security events.
• Vulnerability Review: Review routine vulnerability scan results and assist in tracking known weaknesses across assets.
• Ticketing & Documentation: Accurately document all security events, investigations, and remediation steps within the ticketing system. Ensure tickets are resolved and closed out in accordance with standard operating procedures.
• Escalation: Escalate complex, high-priority, or unverified threats to more senior SOC staff or incident response leads with clear and concise briefing notes.
• Cross-Functional Collaboration: Collaborate with IT, system administration, and other cross-functional teams during investigations and incident resolution as needed.

Foundational Qualifications

• Foundational Knowledge: Basic understanding of networking protocols (TCP/IP, DNS, HTTP/S), operating systems (Windows and Linux), and common security concepts.
• Analytical Mindset: Strong attention to detail with a natural curiosity for investigating anomalies and logs.
• Communication: Good written and verbal communication skills, with the ability to document technical findings clearly and work effectively in a team environment.

KEY SKILLS

• IT Professional - 1+ years
• Strong attention to detail
• Excellent communication skills (written and verbal)

NICE TO HAVE SKILLS

• CISSP or equivalent
• Education (Preferred but not required): Associate's or Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent practical experience/certifications).

INTERVIEW PROCESS

• One round via Microsoft Teams.

EQUIPMENT

Equipment provision and requirements are not specified in either source.

ADDITIONAL DETAILS

• Schedule: 40 hours per week; day shift, 8:00 a.m. 5:00 p.m.; no weekends. Staff augmentation; RAW billing type: Daily. One position; bid limit: two candidates per vendor.
• Education conflict - verification required: RAW minimum education field says Bachelor's Degree. The client PD and the RAW narrative explicitly state education is preferred but not required and describe an associate's or bachelor's degree in Cybersecurity, IT, Computer Science or a related field, or equivalent practical experience/certifications. Confirm the controlling requirement before rejecting or submitting a candidate on education grounds.

Candidate Evaluation - Prioritized Skill Baseline Requisition 167130 | ETF Security Analyst I | Baseline 167130 v1 | Frozen October 19, 2026. Names, categories, ordering and weights below govern subsequent candidate evaluations. No candidate is scored in this document. Source key: PD = Security Analyst 1 - PD.docx; RAW = Raw -- 30-ETF-SecurityAnalyst.docx. Both = client PD plus the matching RAW narrative. Narrative duties assigned required weight do not become new formal minimums. Rank Skill Classification Wt. Source Selection Rationale 1 Alert Triage Critical / Primary 3 Both - responsibility Initial security-alert review, false-positive discrimination and appropriate escalation. 2 SOC Monitoring Critical / Primary 3 Both - responsibility Maintains security-tool health, ingestion and visibility across the SOC. 3 Attention to Detail Critical / Primary 3 RAW - required; PD - qualification Explicit screening priority applied to anomalies and investigations. 4 Technical Communication Critical / Primary 3 RAW - required; PD - qualification Explicit screening priority for clear findings and escalation briefings. 5 Incident Documentation Critical / Primary 3 Both - responsibility Creates accurate investigation and remediation records through ticket closure. 6 Vulnerability Review Required / Supporting 3 Both - responsibility Supports review of scan findings and asset weakness tracking. 7 IT Experience Required / Supporting 3 RAW - required One or more years of professional IT experience is explicitly required. 8 Networking Fundamentals Required / Supporting 3 Both - qualification Supports meaningful interpretation of network security activity. 9 Operating Systems Required / Supporting 3 Both - qualification Windows and Linux fundamentals support system-log investigations. 10 Security Fundamentals Required / Supporting 3 Both - qualification and summary Provides the conceptual foundation for threat detection and incident response. 11 Cross Functional Collaboration Required / Supporting 3 Both - responsibility and qualification Coordinates investigations and resolution with IT and system administrators. 12 Security Certification Preferred / Differentiating 1 RAW - preferred; PD - education alternatives CISSP or equivalent is a differentiator rather than a knockout.

Mandatory Eligibility Gates

Requirement	Status	Source	Clarification Needed
Current WI resident; no relocation	Explicit Hard Gate	RAW work arrangement	Confirm current residency and work from within WI.
1+ years as IT professional	Explicit Hard Gate	RAW required skills	Verify dated professional IT experience; no waiver supplied. Tenure may also inform the distinct IT Experience skill under S1 rules.
Education minimum	Verification Required	RAW field vs PD and RAW narrative	Bachelor's minimum conflicts with preferred/not required education. Client clarification required; no approved exception inferred.
Security and FTI access requirements	Verification Required	RAW requirements and overview	Confirm actual screening and access conditions; no clearance level is specified.
40 hours and stated work schedule	Verification Required	RAW position information	Confirm availability, anticipated November 16 start and remote-within-WI or office arrangement.
Complete submission package and location compliance	Explicit Hard Gate	RAW bid and program requirements	Resume with legal name, valid R2R, WI Cover Sheet, cover letter and location confirmation. Obtain referenced forms.

Ayush Verma Technical Recruiter

E: D: A: 505 Knolle Court, Saint Augustine| FL 32092