Cyber Security Analyst

Clinisoltech; New York (NY); Hybrid; USD 80,000 - 90,000; Full time

Job summary

Clinisol Tech Inc is seeking a Senior Cyber Security Analyst to lead security operations across threat detection and incident response. You will harden cloud and identity environments, manage vulnerabilities, and mentor junior analysts—working across SIEM, EDR/XDR, SOAR, and cloud-native tooling.

The role requires hands-on expertise in cloud security, threat hunting, and governance, with the ability to brief executives on security posture and risk.

Qualifications

• Bachelor's degree in Cyber Security, CS, IT or related field or equivalent experience.
• 3–4 years hands-on in security operations, incident response, or threat detection.
• Experience with at least one enterprise SIEM and one EDR/XDR in production.
• Solid understanding of attacker tradecraft and MITRE ATT&CK.
• Strong networking and OS fundamentals (Windows/Linux).
• Scripting ability in Python or PowerShell for automation and log analysis.
• Proven incident documentation and stakeholder communication skills.

Responsibilities

• Lead detection, triage, investigation and response for security incidents.
• Perform proactive threat hunting aligned with MITRE ATT&CK; tune detection rules.
• Engineer and maintain SOAR playbooks for enrichment, containment and response.
• Own end-to-end vulnerability management — scanning, prioritization, remediation tracking.
• Harden cloud security posture across AWS and Azure; IAM, logging, CSPM findings.
• Support identity security and Zero Trust initiatives (MFA, conditional access).
• Conduct phishing, malware, and forensic analysis; report root causes.
• Mentor junior SOC analysts; review escalations and improve runbooks.
• Brief stakeholders on threats, incidents, and security posture.

Skills

Incident response

Threat detection

Scripting: Python/PowerShell

MITRE ATT&CK

Cloud security

SIEM

EDR/XDR

Threat hunting

Communication

Education

Bachelor's degree in Cyber Security, CS, or IT

Tools

Splunk (SPL)

Microsoft Sentinel (KQL)

Elastic Security

QRadar

CrowdStrike Falcon

Defender for Endpoint

SOAR: Splunk SOAR / Cortex XSOAR

AWS GuardDuty | CloudTrail

Okta / Entra ID

Job description

Cyber Security Analyst – Threat Detection, Cloud & Security Operations

Employment Type: Full-Time, W2 (deployed to client projects)

Experience: 3-4 years

Compensation: $80,000 – $90,000 per year

Work Mode: On-Site / Hybrid

Work Authorization

At this time, we are only able to consider candidates who are authorized to work in the United States without sponsorship.

Why This Role?

The best senior analysts are not one-trick specialists — they can triage an incident at 9 AM, tune a detection rule at noon, and brief leadership on cloud risk by 4. This role is built for that profile: broad, hands‑on ownership across SOC operations, threat hunting, cloud security, and vulnerability management, with the tooling depth that senior security roles across the market demand.

Job Summary

Clinisol Tech Inc is seeking a Senior Cyber Security Analyst to take a lead role across security operations. You will drive threat detection and incident response, harden cloud and identity environments, run vulnerability management, and mentor junior analysts — operating across the full modern security stack: SIEM, EDR/XDR, SOAR, and cloud-native security tooling.

Key Responsibilities

• Lead detection, triage, investigation, and response for security incidents across cloud and on-prem environments.
• Perform proactive threat hunting mapped to the MITRE ATT&CK framework; develop and tune detection rules (KQL, SPL, Sigma).
• Engineer and maintain SOAR playbooks to automate enrichment, containment, and response workflows.
• Own vulnerability management end-to-end — scanning, risk-based prioritization (CVSS/EPSS), remediation tracking, and reporting.
• Harden cloud security posture across AWS and Azure — identity (IAM), logging, misconfiguration remediation, and CSPM findings.
• Support identity security and Zero Trust initiatives — conditional access, MFA, privileged access management.
• Conduct phishing, malware, and forensic analysis; produce root‑cause and lessons‑learned reports.
• Mentor junior SOC analysts, review escalations, and improve runbooks and incident‑response procedures.
• Brief technical and executive stakeholders on threats, incidents, and security posture.

Qualifications

• Bachelor's degree in Cyber Security, Computer Science, Information Technology, or a related field (or equivalent experience).
• 3-4 years of hands‑on experience in security operations, incident response, or threat detection roles.
• Deep experience with at least one enterprise SIEM and one EDR/XDR platform in a production environment.
• Strong grasp of attacker tradecraft — phishing, ransomware, lateral movement, privilege escalation, C2 — and the MITRE ATT&CK framework.
• Solid networking and OS fundamentals: TCP/IP, DNS, Windows/Linux internals, Active Directory attack paths.
• Scripting ability in Python or PowerShell for automation, log analysis, and tooling.
• Strong incident documentation, communication, and stakeholder‑briefing skills.

Tools & Technologies You Will Use

• SIEM & detection: Splunk (SPL), Microsoft Sentinel (KQL), Elastic Security, QRadar; Sigma rules.
• EDR/XDR & response: CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne; SOAR platforms (Splunk SOAR, Sentinel playbooks, Cortex XSOAR).
• Cloud & identity security: AWS (GuardDuty, Security Hub, CloudTrail), Azure (Defender for Cloud, Entra ID), Okta; CSPM tools (Wiz, Prisma Cloud exposure a plus).
• Vulnerability & analysis: Tenable Nessus, Qualys, Rapid7; Wireshark, Sysinternals; threat intel platforms (MISP, Recorded Future exposure a plus).
• Automation: Python, PowerShell, REST APIs.

Preferred Skills

• Detection‑engineering experience — building detections‑as‑code, tuning for false‑positive reduction.
• Purple‑team or adversary‑emulation exposure (Atomic Red Team, Caldera).
• Digital forensics fundamentals (memory, disk, log timeline analysis).
• Exposure to compliance‑driven environments (SOC 2, HIPAA, PCI DSS, NIST CSF).
• Certifications such as CISSP, GIAC (GCIH, GCIA, GCFA), CySA+, Microsoft SC‑200, Splunk Core Certified, or AWS Security Specialty are a plus.
• Container & IaC security — Kubernetes/EKS/AKS runtime threats, image scanning, Terraform misconfig detection
• IR framework & SOC metrics — NIST 800‑61 lifecycle, MTTD/MTTR, ATT&CK coverage measurement

About Clinisol Tech Inc.

Clinisol Tech Inc connects businesses with skilled professionals who drive results. We combine industry expertise with a personalized approach to deliver the right talent quickly and efficiently. Our mission is to accelerate careers and companies by connecting exceptional technology talent with innovative organizations that value people.