Cyber Security Analyst

HRCap, Inc.; United States; Remote; USD 70,000 - 90,000; Full time

Benefits offered by this job

Remote work stipends

Health insurance

Technology stipend

Job summary

HRCap, Inc. is seeking an analytical Cybersecurity Analyst I to join our fully distributed Global SOC. In this foundational role, you will monitor real-time security events across multi-cloud environments and triage alerts to protect corporate assets from threats.

This entry-level position offers a remote-first setup with mentorship into security engineering, incident response, and threat hunting. Bachelor’s in a technical field and basic scripting skills in Python or PowerShell are encouraged

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 0–2 years of professional cybersecurity experience (entry-level).
• Fundamental networking, cloud architectures (AWS/Azure/GCP), and OS internals.
• Basic scripting ability in Python or PowerShell to parse logs.

Responsibilities

• Monitor, analyze, and triage real-time security alerts across SIEM and EDR.
• Assess threat alerts and route to Tier-2 incident responders using playbooks.
• Assist in automated vulnerability scans and patch tracking.
• Investigate phishing and email security actions; implement blocklist rules.
• Audit access logs, MFA enforcement, and document security controls for frameworks.

Skills

Python

PowerShell

Remote communication

SIEM basics

Cloud concepts

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Elastic Security

Microsoft Sentinel

Job description

Our client is a venture-backed, high-growth technology enterprise scaling enterprise-grade cloud solutions and secure data infrastructure. We are seeking an analytical, vigilant, and tech-fluent Cybersecurity Analyst I to join our fully distributed Global Security Operations Center (SOC). In this foundational role, you will protect corporate digital assets, monitor real-time network event streams, and triage security alerts across multi-cloud environments to mitigate vulnerabilities and maintain a proactive defense posture.

Why Join Us

• Total Remote Work Autonomy: Defend corporate networks and analyze threat landscapes from your home office, utilizing a premium, cloud-native security stack and modern communication tools.
• Accelerated Security Academy: Bypass repetitive IT helpdesk roles. Dive straight into security engineering, incident response, and threat hunting workflows under the direct mentorship of senior security engineers.

Responsibilities

• Security Event Telemetry & Triage: Monitor, analyze, and triage real-time security alerts generated across Enterprise Security Information and Event Management (SIEM) consoles and Endpoint Detection and Response (EDR) platforms.
• Incident Escalation & Tracking: Assess incoming threat alerts (phishing, malware execution, unauthorized access attempts), categorize severity levels, and route actionable anomalies to Tier-2 incident responders using established playbooks.
• Vulnerability Assessment Support: Assist in executing regular automated vulnerability scans across cloud infrastructure, tracking patching timelines, and verifying remediation cycles with system administrators.
• Phishing & Email Security Operations: Investigate reported suspicious emails, analyze header records, execute safe URL/attachment sandboxing, and implement localized blocklist rules to safeguard corporate users.
• Security Hygiene Compliance: Audit access control logs, verify multi-factor authentication (MFA) enforcement policies, and help document security controls to satisfy SOC 2, ISO 27001, or NIST regulatory frameworks.

Requirements

• Education: Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or an equivalent technical or quantitative discipline.
• Experience Level: 0 to 2 years of professional experience. This is an entry-level technical position; robust cybersecurity internships, university hands-on lab projects, active participation in Capture The Flag (CTF) competitions, or an extensive GitHub portfolio demonstrating script-driven security tools are highly valued.
• Core Technical Literacy: Fundamental, conceptual understanding of networking protocols (TCP/IP, DNS, HTTP/S), cloud architectures (AWS, Azure, or GCP), and standard operating system internals (Linux/Windows).
• Scripting Foundations: Basic capability reading or editing scripts in at least one modern language—specifically Python or PowerShell—to parse logs and automate basic data transformations.
• Proactive Remote Communication: Exceptional written and verbal communication skills. Because security operations rely on transparent, unambiguous documentation, you must excel at drafting clear technical incident logs.

Preferred Qualifications

• Basic foundational certifications such as CompTIA Security+, Network+, Cisco CyberOps Associate, or AWS Certified Cloud Practitioner.
• Practical exposure to SIEM or log aggregation tools (such as Splunk, Elastic Security, or Microsoft Sentinel) during coursework or internships.
• Familiarity with common security analysis frameworks (such as the MITRE ATT&CK matrix or OWASP Top 10).
• Location: Fully Remote (United States)
• Visa Support: OPT / STEM OPT Validation & H1-B Sponsorship Provided
• Salary Range: $70,000 – $90,000 USD base structure + Performance Bonus, Remote Workspace Technology Stipends, and Premium Corporate Health, Dental, and Vision Plans.