Cyber Security Intern

Bright Network Consulting; United States; Remote; USD 80,000 - 130,000; Full time

Job summary

Bright Network Consulting is seeking a skilled Cyber Security Analyst for a remote role in the United States. The candidate will monitor, detect, and respond to security incidents across endpoints, networks, and cloud environments.

Responsibilities include vulnerability assessments, threat hunting, and maintaining security controls. Strong knowledge of SIEM tools and IAM practices is essential for protecting sensitive information and ensuring regulatory compliance.

Qualifications

• Strong understanding of cybersecurity principles and threats.
• Experience with threat detection, vulnerability management, and security operations.
• Ability to identify security risks, investigate threats, and implement mitigations.
• Familiarity with incident response, containment, and recovery processes.
• Knowledge of IAM, MFA, and secure authentication mechanisms.

Responsibilities

• Monitor security alerts, logs, and network activity to identify incidents.
• Investigate security incidents and coordinate response.
• Perform vulnerability scans and assess system weaknesses.
• Analyze security events with SIEM platforms.
• Support incident response and threat intelligence activities.
• Implement and maintain security controls across endpoints, networks, and cloud.
• Review configurations and policies to ensure compliance with standards.

Skills

Cybersecurity fundamentals

Threat detection

SIEM knowledge

Endpoint security

Incident response

IAM/MFA knowledge

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Nessus

OpenVAS

Wireshark

CrowdStrike

Defender for Endpoint

Job description

Hiring: Cyber Security Analyst | Remote – USA

We are hiring a skilled and motivated Cyber Security professional on behalf of one of our clients for a remote opportunity.

The ideal candidate will have a strong understanding of cybersecurity principles, threat detection, vulnerability management, and security operations. The candidate should be capable of identifying security risks, investigating potential threats, and implementing effective measures to protect systems, networks, applications, and sensitive information.

Job Title: Cyber Security Analyst

Location: United States

Key Responsibilities

• Monitor security alerts, system logs, and network activities to identify suspicious behaviour and potential security incidents.
• Investigate security incidents, determine their root causes, and coordinate appropriate response and remediation activities.
• Perform vulnerability assessments and security scans to identify weaknesses in systems, applications, and network infrastructure.
• Analyse security events using Security Information and Event Management (SIEM) tools.
• Support incident response activities, including threat identification, containment, eradication, and recovery.
• Conduct threat intelligence analysis to understand emerging cyber threats, attack techniques, and vulnerabilities.
• Implement and maintain security controls to protect endpoints, servers, networks, and cloud environments.
• Assess firewall configurations, intrusion detection systems, and intrusion prevention systems to identify potential security gaps.
• Conduct risk assessments and recommend mitigation strategies to reduce organisational cybersecurity risks.
• Monitor endpoint detection and response (EDR) systems to identify and investigate suspicious activities.
• Support identity and access management processes, including access reviews, authentication policies, and privileged access controls.
• Assist in implementing multi-factor authentication (MFA), least-privilege access, and secure authentication mechanisms.
• Review system configurations and security policies to ensure compliance with organisational standards.
• Conduct security assessments of applications, infrastructure, and cloud-based environments.
• Analyse phishing emails, suspicious attachments, and potentially malicious URLs to identify security threats.
• Support malware analysis and investigation of potentially compromised systems.
• Perform security audits and assist in identifying gaps in existing security practices.
• Collaborate with IT, infrastructure, development, and compliance teams to address security vulnerabilities.
• Assist with penetration testing activities and coordinate remediation of identified findings.
• Maintain incident reports, security documentation, investigation records, and vulnerability registers.
• Support patch management activities to ensure operating systems, applications, and security tools remain updated.
• Monitor network traffic and investigate unusual patterns that may indicate unauthorised access or data exfiltration.
• Assist in developing security awareness materials and educating employees about phishing, social engineering, and cyber hygiene.
• Support business continuity, disaster recovery, and cybersecurity incident preparedness activities.
• Contribute to security policy development, risk management initiatives, and continuous improvement of security operations.
• Ensure security activities align with applicable data protection regulations and recognised cybersecurity frameworks.

Technical Skills

• Knowledge of cybersecurity fundamentals, security operations, and information security principles.
• Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, IBM QRadar, or Elastic Security.
• Understanding of networking concepts, including TCP/IP, DNS, HTTP/HTTPS, VPNs, firewalls, and network segmentation.
• Familiarity with security tools such as Wireshark, Nmap, Nessus, Qualys, or OpenVAS.
• Understanding of endpoint security and EDR platforms such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
• Knowledge of operating systems, including Windows, Linux, and their security configurations.
• Familiarity with vulnerability assessment, patch management, and security remediation processes.
• Understanding of authentication, authorisation, encryption, hashing, digital certificates, and access control mechanisms.
• Familiarity with scripting languages such as Python, PowerShell, or Bash for security automation.
• Knowledge of common attack techniques, including phishing, malware, brute-force attacks, privilege escalation, and lateral movement.
• Understanding of the MITRE ATT&CK framework and common cybersecurity threat models.
• Familiarity with cloud security services across AWS, Microsoft Azure, or Google Cloud Platform.
• Understanding of identity and access management (IAM), multi-factor authentication, and privileged access management.
• Familiarity with web application security concepts and the OWASP Top 10.
• Knowledge of vulnerability management, security hardening, and secure configuration practices.
• Familiarity with security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
• Understanding of security logging, event correlation, alert triage, and incident documentation.
• Familiarity with ticketing and workflow management tools such as Jira or ServiceNow.

Required Skills & Qualifications

• Strong understanding of cybersecurity concepts, information security principles, and common cyber threats.
• Knowledge of network security, endpoint protection, operating system security, and access management.
• Ability to analyse security alerts, investigate suspicious activities, and identify potential vulnerabilities.
• Understanding of incident response procedures and security event investigation.
• Familiarity with vulnerability assessment and risk management methodologies.
• Strong analytical thinking, problem-solving, and troubleshooting abilities.
• Attention to detail when reviewing security logs, alerts, configurations, and investigation evidence.
• Ability to document security incidents, technical findings, and remediation recommendations clearly.
• Strong communication skills and the ability to collaborate with technical and non-technical stakeholders.
• Ability to prioritise security incidents and manage multiple tasks effectively.
• Understanding of confidentiality, data protection, and responsible handling of sensitive information.
• Ability to work independently and collaborate with distributed teams in a remote environment.
• A degree in Cybersecurity, Computer Science, Information Technology, Network Security, or a related field is preferred.

Preferred Qualifications

• Previous experience in a Security Operations Centre (SOC), security monitoring, or incident response environment.
• Hands-on experience investigating alerts and incidents using SIEM and EDR platforms.
• Familiarity with threat hunting techniques and proactive security monitoring.
• Experience conducting vulnerability assessments using tools such as Nessus, Qualys, or OpenVAS.
• Understanding of penetration testing methodologies and security assessment techniques.
• Familiarity with ethical hacking tools and platforms such as Burp Suite, Metasploit, and Kali Linux.
• Knowledge of web application security, API security, and common application vulnerabilities.
• Experience analysing network traffic, packet captures, and suspicious communications using Wireshark or similar tools.
• Familiarity with malware investigation, phishing analysis, and digital forensics fundamentals.
• Understanding of cloud security monitoring, cloud access controls, and cloud configuration assessments.
• Knowledge of zero-trust security principles, network segmentation, and defence-in-depth strategies.
• Experience with security automation and orchestration tools, including Security Orchestration, Automation and Response (SOAR) platforms.
• Familiarity with scripting and automation using Python, PowerShell, or Bash.
• Understanding of penetration testing reports, vulnerability prioritisation, and remediation tracking.
• Knowledge of governance, risk, and compliance (GRC) processes and security audit requirements.
• Familiarity with ISO 27001, NIST, CIS Controls, PCI DSS, or other relevant security standards.
• Understanding of UK GDPR and the Data Protection Act 2018, where applicable to the role.
• Experience supporting security awareness programmes and phishing simulation exercises.
• Familiarity with threat intelligence platforms, indicators of compromise (IOCs), and threat analysis techniques.
• Understanding of secure software development practices and DevSecOps principles.
• Relevant certifications such as CompTIA Security+, CySA+, Network+, Certified Ethical Hacker (CEH), SSCP, or CISSP are an advantage, depending on the candidate's experience.
• Practical cybersecurity labs, security research, Capture the Flag (CTF) participation, or a portfolio of security projects are an advantage.