Cyber Security Analyst

Clinisoltech; Huntsville (AL); Hybrid; USD 80,000 - 90,000; Full time

Job summary

Clinisol Tech Inc is seeking a Senior Cyber Security Analyst to take a lead role across security operations. You will drive threat detection and incident response, harden cloud and identity environments, run vulnerability management, and mentor junior analysts — operating across the full modern security stack: SIEM, EDR/XDR, SOAR, and cloud-native security tooling.

Experience in cloud and on-prem environments, strong knowledge of MITRE ATT&CK, and hands-on tooling across Splunk, Defender, and

Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience).
• 3-4 years of hands-on experience in security operations, incident response, or threat detection roles.
• Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment.
• Strong grasp of attacker tradecraft — phishing, ransomware, lateral movement, privilege escalation, C2 — and the MITRE ATT&CK framework.
• Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths.
• Scripting ability in Python or PowerShell for automation, log analysis, and tooling.
• Strong incident documentation, communication, and stakeholder-briefing skills.

Responsibilities

• Lead detection, triage, investigation, and response for security incidents across cloud and on-prem environments.
• Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma).
• Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows.
• Own vulnerability management end-to-end — scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting.
• Harden cloud security posture across AWS and Azure — identity (IAM), logging, misconfiguration remediation, and CSPM findings.
• Support identity security and Zero Trust initiatives — conditional access, MFA, privileged access management.
• Conduct phishing, malware, and forensic analysis; produce root-cause and lessons-learned reports.
• Mentor junior SOC analysts, review escalations, and improve runbooks and incident-response procedures.
• Brief technical and executive stakeholders on threats, incidents, and security posture.

Skills

SOC operations

Incident response

Threat detection

Cloud security

MITRE ATT&CK

Python/PowerShell

Vulnerability management

Identity security

Education

Bachelor's degree in Cyber Security / CS / IT

Tools

Splunk

Microsoft Sentinel

EDR/XDR platforms

SOAR platforms

CrowdStrike Falcon

Defender for Endpoint

AWS GuardDuty

Azure Defender

Okta

CSPM tools

Job description

Job Title: Senior Cyber Security Analyst – Threat Detection, Cloud & Security Operations

Employment Type: Full-Time, W2 (deployed to client projects)

Experience: 3-4 years

Compensation: $80,000 – $90,000 per year

Work Mode: On-Site / Hybrid

Work Authorization

At this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship.

Why This Role?

The best senior analysts are not one-trick specialists — they can triage an incident at 9 AM, tune a detection rule at noon, and brief leadership on cloud risk by 4. This role is built for that profile: broad, hands-on ownership across SOC operations, threat hunting, cloud security, and vulnerability management, with the tooling depth that senior security roles across the market demand.

Job Summary

Clinisol Tech Inc is seeking a Senior Cyber Security Analyst to take a lead role across security operations. You will drive threat detection and incident response, harden cloud and identity environments, run vulnerability management, and mentor junior analysts — operating across the full modern security stack: SIEM, EDR/XDR, SOAR, and cloud-native security tooling.

Key Responsibilities

• Lead detection, triage, investigation, and response for security incidents across cloud and on-prem environments.
• Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma).
• Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows.
• Own vulnerability management end-to-end — scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting.
• Harden cloud security posture across AWS and Azure — identity (IAM), logging, misconfiguration remediation, and CSPM findings.
• Support identity security and Zero Trust initiatives — conditional access, MFA, privileged access management.
• Conduct phishing, malware, and forensic analysis; produce root-cause and lessons-learned reports.
• Mentor junior SOC analysts, review escalations, and improve runbooks and incident-response procedures.
• Brief technical and executive stakeholders on threats, incidents, and security posture.

Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience).
• 3-4 years of hands-on experience in security operations, incident response, or threat detection roles.
• Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment.
• Strong grasp of attacker tradecraft — phishing, ransomware, lateral movement, privilege escalation, C2 — and the MITRE ATT&CK framework.
• Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths.
• Scripting ability in Python or PowerShell for automation, log analysis, and tooling.
• Strong incident documentation, communication, and stakeholder-briefing skills.

Tools & Technologies You Will Use

• SIEM & detection: Splunk (SPL), Microsoft Sentinel (KQL), Elastic Security, QRadar; Sigma rules.
• EDR/XDR & response: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne; SOAR platforms (Splunk SOAR, Sentinel playbooks, Cortex XSOAR).
• Cloud & identity security: AWS (GuardDuty, Security Hub, CloudTrail), Azure (Defender for Cloud, Entra ID), Okta; CSPM tools (Wiz, Prisma Cloud exposure a plus).
• Vulnerability & analysis: Tenable Nessus, Qualys, Rapid7; Wireshark, Sysinternals; threat intel platforms (MISP, Recorded Future exposure a plus).
• Automation: Python, PowerShell, REST APIs.

Preferred Skills

• Detection-engineering experience — building detections-as-code, tuning for false-positive reduction.
• Purple-team or adversary-emulation exposure (Atomic Red Team, Caldera).
• Digital forensics fundamentals (memory, disk, log timeline analysis).
• Exposure to compliance-driven environments (SOC 2, HIPAA, PCI DSS, NIST CSF).
• Certifications such as CISSP, GIAC (GCIH, GCIA, GCFA), CySA+, Microsoft SC-200, Splunk Core Certified, or AWS Security Specialty are a plus.

About Clinisol Tech Inc.

Clinisol Tech Inc connects businesses with skilled professionals who drive results. We combine industry expertise with a personalized approach to deliver the right talent quickly and efficiently. Our mission is to accelerate careers and companies by connecting exceptional technology talent with innovative organizations that value people.