Cyber Security Analyst

HRCap, Inc.; United States; Remote; USD 70,000 - 90,000; Full time

Job summary

HRCap, Inc. seeks an analytical Cybersecurity Analyst I for its fully distributed Global Security Operations Center. In this entry-level position, you will monitor security alerts, triage incidents, and support vulnerability remediation across multi-cloud environments.

You will gain hands-on experience with SIEM/EDR tools, phishing investigations, and security logging, while receiving mentorship and a clear path toward advanced security roles.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent technical discipline.
• 0–2 years of professional cybersecurity experience; internships or labs valued.
• Fundamental networking (TCP/IP, DNS, HTTP/S) and cloud architectures (AWS/Azure/GCP).
• Basic ability to read or edit Python or PowerShell scripts for log parsing.

Responsibilities

• Monitor and triage real-time security alerts across SIEM/EDR platforms.
• Assess threat alerts, categorize severity, and escalate per playbooks.
• Assist automated vulnerability scans and verify remediation with admins.
• Investigate phishing and email threats, analyze headers, and block risky URLs.
• Audit access logs and MFA policies to support security compliance.

Skills

Networking basics

Cloud architectures

Python

PowerShell

Education

Bachelor's degree in Cybersecurity

Tools

Splunk

Elastic Security

Microsoft Sentinel

Job description

Our client is a venture-backed, high-growth technology enterprise scaling enterprise-grade cloud solutions and secure data infrastructure. We are seeking an analytical, vigilant, and tech-fluent Cybersecurity Analyst I to join our fully distributed Global Security Operations Center (SOC). In this foundational role, you will protect corporate digital assets, monitor real-time network event streams, and triage security alerts across multi-cloud environments to mitigate vulnerabilities and maintain a proactive defense posture.

Why Join Us

• Total Remote Work Autonomy: Defend corporate networks and analyze threat landscapes from your home office, utilizing a premium, cloud-native security stack and modern communication tools.
• Accelerated Security Academy: Bypass repetitive IT helpdesk roles. Dive straight into security engineering, incident response, and threat hunting workflows under the direct mentorship of senior security engineers.

Responsibilities

• Security Event Telemetry & Triage: Monitor, analyze, and triage real-time security alerts generated across Enterprise Security Information and Event Management (SIEM) consoles and Endpoint Detection and Response (EDR) platforms.
• Incident Escalation & Tracking: Assess incoming threat alerts (phishing, malware execution, unauthorized access attempts), categorize severity levels, and route actionable anomalies to Tier-2 incident responders using established playbooks.
• Vulnerability Assessment Support: Assist in executing regular automated vulnerability scans across cloud infrastructure, tracking patching timelines, and verifying remediation cycles with system administrators.
• Phishing & Email Security Operations: Investigate reported suspicious emails, analyze header records, execute safe URL/attachment sandboxing, and implement localized blocklist rules to safeguard corporate users.
• Security Hygiene Compliance: Audit access control logs, verify multi-factor authentication (MFA) enforcement policies, and help document security controls to satisfy SOC 2, ISO 27001, or NIST regulatory frameworks.

Requirements

• Education: Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or an equivalent technical or quantitative discipline.
• Experience Level: 0 to 2 years of professional experience. This is an entry-level technical position; robust cybersecurity internships, university hands-on lab projects, active participation in Capture The Flag (CTF) competitions, or an extensive GitHub portfolio demonstrating script-driven security tools are highly valued.
• Core Technical Literacy: Fundamental, conceptual understanding of networking protocols (TCP/IP, DNS, HTTP/S), cloud architectures (AWS, Azure, or GCP), and standard operating system internals (Linux/Windows).
• Scripting Foundations: Basic capability reading or editing scripts in at least one modern language—specifically Python or PowerShell—to parse logs and automate basic data transformations.
• Proactive Remote Communication: Exceptional written and verbal communication skills. Because security operations rely on transparent, unambiguous documentation, you must excel at drafting clear technical incident logs.

Preferred Qualifications

• Basic foundational certifications such as CompTIA Security+, Network+, Cisco CyberOps Associate, or AWS Certified Cloud Practitioner.
• Practical exposure to SIEM or log aggregation tools such as Splunk, Elastic Security, or Microsoft Sentinel during coursework or internships.
• Familiarity with common security analysis frameworks such as the MITRE ATT&CK matrix or OWASP Top 10.
• Location: Fully Remote (United States)
• Visa Support: OPT / STEM OPT Validation & H1-B Sponsorship Provided
• Salary Range: $70,000 – $90,000 USD base structure + Performance Bonus, Remote Workspace Technology Stipends, and Premium Corporate Health, Dental, and Vision Plans.