Cybersecurity Analyst

Jobtailor; Deutschland; Vor Ort; EUR 65.000 - 90.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an experienced cybersecurity operations professional to monitor security tooling, investigate incidents and coordinate responses across campus stakeholders. The role emphasizes threat detection, documentation, and collaboration with internal IT teams and external partners. You will develop detection content, support vulnerability programs and contribute to program improvement using automation and AI techniques.

This position requires a U.S. work authorization?

Qualifikationen

• Bachelor's degree or equivalent in a related field and 5 years in IT/cybersecurity
• Experience with security monitoring, incident response, vulnerability management and related tech
• Knowledge of security operations practices and threat detection
• Working knowledge of networks, OS, IAM and cloud security
• Ability to analyze logs and events to identify threats and anomalies
• Strong written and verbal communication across technical and non-technical audiences

Aufgaben

• Monitor and analyze security alerts across SIEM, EDR, email, network, identity and cloud tools
• Triagize and investigate phishing, compromised accounts, malware, and unauthorized activity
• Support incident response with containment, evidence collection, and documentation
• Correlate logs and security activity across systems and cloud environments
• Support vulnerability management from scanning to remediation tracking
• Develop, tune, test and maintain detection rules and alert logic
• Coordinate with MDR providers and external partners on investigations and response
• Maintain investigation records, tickets, and runbooks
• Develop cybersecurity metrics and reports to identify trends and improve programs
• Participate in exercises and post-incident reviews; drive improvement initiatives
• Leverage AI, automation and scripting to improve analysis and workflows

Kenntnisse

Cybersecurity Analysis

Incident Response

Vulnerability Management

Security Monitoring

Identity And Access Management

Analytical Skills

Documentation

Communication

Collaboration

Ausbildung

Bachelor's degree in Cybersecurity / CS

Tools

SIEM

EDR

MFA

Automation

Scripting

Artificial Intelligence

Jobbeschreibung

• Monitor and analyze security alerts and events across SIEM, EDR, email, network, identity, and cloud security tools
• Triage and investigate phishing, compromised accounts, malware, unauthorized access, and anomalous system or network activity
• Support incident response through containment, evidence collection, timeline development, documentation, and coordination with affected teams
• Analyze and correlate logs and security activity across systems, networks, endpoints, identity platforms, and cloud environments
• Support vulnerability management through scanning, validation, findings analysis, remediation tracking, and IT coordination
• Develop, tune, test, and maintain detection rules, alert logic, and security monitoring use cases
• Support identity and access management security operations, including compromised identity response and MFA-related activities
• Coordinate with MDR providers and external cybersecurity partners on investigations, escalations, and response
• Maintain investigation records, incident tickets, operational documentation, and runbooks
• Develop cybersecurity operations metrics and reports to identify trends and support program improvement
• Participate in incident response exercises, tabletop scenarios, post-incident reviews, and cybersecurity improvement initiatives
• Use artificial intelligence, automation, scripting, and other technologies to improve analysis, investigation, monitoring, reporting, documentation, and workflow efficiency
• Identify opportunities to strengthen cybersecurity workflows, detection capabilities, documentation, and response processes
• Collaborate with cybersecurity engineers, IT teams, external security partners, and campus stakeholders to protect Maine's public universities

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, or an equivalent combination of education and experience
• Five years of experience in information technology, cybersecurity operations, information security, security analysis, or a related field
• Demonstrated experience performing cybersecurity analysis using security monitoring, incident response, vulnerability management, endpoint security, identity security, or related technologies
• Knowledge of cybersecurity operations practices, including security monitoring, alert triage, incident response, threat detection, and vulnerability management
• Working knowledge of networking, operating systems, identity and access management, and cloud environments as they relate to cybersecurity analysis and investigation
• Ability to analyze logs, alerts, security events, and system activity to identify threats, anomalous behavior, and unauthorized activity
• Strong analytical, problem-solving, documentation, and communication skills
• Ability to communicate cybersecurity information effectively to technical and nontechnical audiences and collaborate across teams
• Candidates must live in and be authorized to work in the United States
• U.S. work authorization must not require employer sponsorship now or in the future
• Applicants requiring visa sponsorship or OPT extensions cannot be considered
• Preferred: relevant cybersecurity certification, such as CompTIA Security+, CompTIA CySA+, SSCP, Microsoft SC-200, GIAC Security Essentials (GSEC), or comparable credential
• Preferred: experience supporting incident response or security operations in a complex enterprise environment
• Preferred: experience with scripting, automation, or orchestration for cybersecurity
• Preferred: experience with an MDR provider, SOC, or external cybersecurity service provider
• Preferred: experience in higher education, the public sector, or another complex multi-site environment
• Preferred: experience using artificial intelligence or emerging technologies for cybersecurity operations

Core Competencies

Demonstrates expertise in cybersecurity operations, including incident response, vulnerability management, and security monitoring. Proficient in analyzing security alerts and events across various platforms while effectively communicating findings to diverse audiences.

Highest-signal resume keywords

• Cybersecurity Analysis
• Incident Response
• Vulnerability Management
• Security Monitoring
• Identity And Access Management

ATS Optimization Keywords

Hard Skills

• Security Monitoring
• Incident Response
• Vulnerability Management
• Endpoint Security
• Threat Detection
• Log Analysis
• Alert Triage
• Malware Investigation
• Phishing Response
• Cloud Security

Soft Skills

• Analytical Skills
• Problem-Solving
• Documentation
• Communication
• Collaboration

Certifications & Qualifications

• CompTIA Security+
• CompTIA CySA+
• SSCP
• Microsoft SC-200
• GIAC Security Essentials (GSEC)

Industry Keywords

• Cybersecurity Operations
• Information Security
• Higher Education
• Public Sector
• Multi-Site Environment

Tools & Technologies

• SIEM
• EDR
• MFA
• Automation
• Scripting
• Artificial Intelligence
• Cybersecurity Metrics
• Incident Tickets
• Operational Documentation
• Runbooks