Security Analyst

Job Title: Security Analyst
Job Type: Contract
Job Location: Hybrid, 4 days per week Onsite
 

Overview:

Seeking an Information Security Analyst to support an Information Security Operations team. This person will be one of the first responders to security events across the organization.

Most of the job falls into two areas. The first is monitoring, triaging, and investigating alerts from security tools. The second is resolving security requests from employees, such as reviewing and unblocking websites, handling reports of suspicious email, and answering access and policy questions.

This role suits someone with 2-4 years of hands-on security or IT experience who likes investigating, communicates clearly with non-technical staff, and wants to deepen their skills in security operations. This person will work closely with IT staff and escalate complex incidents to senior security staff when needed.

General Responsibilities:

• Monitor alerts and ticket queues related to cybersecurity and information security.

• Triage escalations from the third-party security operations center, collect relevant data, and determine false positives or facilitate hand-off to higher tier analysts.

• Participate in improving security policies or technical controls.

• Assist in incident response activities as needed.

Mandatory Skills:

• 2-4 years of experience in information security, a security operations center (SOC), or a closely related IT role with regular security duties.

• Hands-on experience triaging alerts in a SIEM or incidents in an ITSM ticketing system.

• Working knowledge of web filtering, including how to review and categorize URLs and process requests to unblock them.

• Understanding of networking basics: TCP/IP, DNS, HTTP/S, proxies, firewalls, and VPNs.

• Ability to investigate phishing emails, including analyzing headers, checking URLs and attachments, and taking remediation steps.

• Strong written and verbal communication skills, including explaining security decisions to non-technical users politely and clearly.

• Ability to prioritize and manage multiple open alerts and requests at the same time.

Desired Skills:

• Industry certifications such as CompTIA Security+, CySA+, GIAC (GSEC, GCIH, GCIA), or Microsoft SC-200.

• Familiarity with the MITRE ATT&CK framework.

• Scripting or automation experience with PowerShell or Python and exposure to SOAR platforms.

• Experience with email security gateways, such as Proofpoint.

• Exposure to cloud security in Azure, AWS, or Microsoft 365.

• Knowledge of vulnerability management tools, such as Tenable.

• Experience in a regulated or public-sector environment, or familiarity with frameworks such as NIST CSF, CIS Controls, or ISO 27001.

• A bachelor's degree in cybersecurity, information technology, computer science, or a related field. Equivalent experience considered.
The projected hourly range for this position is $35 to $43.
On-Demand Group (ODG) provides employee benefits which includes healthcare, dental, and vision insurance. ODG is an equal opportunity employer that does not discriminate on the basis of race, color, religion, gender, sexual orientation, age, national origin, disability, or any other characteristic protected by law.