Cyber Security Analyst

This is a hybrid role (Security Operations + Desktop Support) responsible for securing an enterprise-scale IT and Operational Technology (OT) environment. The position balances remote security monitoring with physical, on-site technical support for office and industrial plant settings.

Core Responsibilities

• Security Ops (70%): Monitor, triage, and investigate security alerts (SIEM, EDR, Cloud). Lead incident response for phishing, malware, and unauthorized access.
• Desktop & Site Support (30%): Provide Level 2 technical support for workstations, industrial PCs (HMIs), and end-user hardware.
• Engineering & Hunting: Tune detection rules, perform proactive threat hunting using the MITRE ATT&CK framework, and assist with automation via PowerShell.
• Identity & Vulnerability: Manage Active Directory/Entra ID permissions and oversee vulnerability patching for endpoints and servers.
• Compliance: Maintain cyber hygiene and security standards across both office and manufacturing plant floors.

Technical Skills & Tools

• EDR/SIEM: Hands-on experience with tools like CrowdStrike, Microsoft 365 Defender, and SIEM platforms.
• Infrastructure: Windows/M365 Admin, Active Directory, Entra ID, and endpoint management (Intune/SCCM).
• Cloud: Foundational knowledge of Azure and AWS security.
• Vulnerability Management: Familiarity with tools like Rapid7, Qualys, or Tenable.

Required Experience & Qualifications

• Experience: Minimum 2+ years in Cyber Security, SOC, or hybrid IT support.
• Environment: Prior experience in manufacturing or industrial settings is highly preferred (OT, SCADA, or HMI exposure).
• Certifications (Preferred): Security+, CySA+, SC-200, AZ-500, or Network+.
• Soft Skills: Strong analytical troubleshooting; ability to explain technical risks to non-technical stakeholders.