Cybersecurity Analyst

Wrench Group; Sarasota (FL); On-site; USD 80,000 - 90,000; Full time

Benefits offered by this job

Unlimited PTO

Health, Vision and Dental

401K with 30% match

Life Insurance

Disability (short/long-term)

Identity Theft protection

Career growth through Wrench Uni

Job summary

Wrench Group is expanding its Cyber Fusion Center team and seeks a Cybersecurity Analyst. The role focuses on monitoring, investigating, and responding to security events while building expertise in incident response and detection engineering.

This remote position offers a strong bonus potential and a competitive total compensation package. You will work with modern security tools, collaborate across IT and business teams, and contribute to identity security and data protection efforts.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, or related field.
• 1–3 years in cybersecurity, SOC ops, or IT support.
• Working knowledge of phishing, endpoints, networking, and identity security.
• Hands-on with SIEM, endpoint protection, vulnerability mgmt, or email security.

Responsibilities

• Monitor, triage, and investigate security alerts from SIEM and detection platforms.
• Provide Tier 1/2 SOC support and assist with investigations.
• Investigate suspicious email activity and take appropriate actions.
• Document findings, actions, and remediation steps.

Skills

Cybersecurity basics

SOC operations

Endpoint protection

Phishing awareness

Analytics

Education

Bachelors in Cybersecurity or IT

Tools

SIEM

Microsoft Defender

Rapid7

Entra ID

Intune

Job description

Remote | Wrench Group | $80,000-$90,000 + Bonus

Ready to take the next step in your cybersecurity career?

Wrench Group is looking for a Cybersecurity Analyst to join our Cybersecurity, Privacy & Governance team. This is a great opportunity for someone with foundational cybersecurity or IT operations experience who is ready to move beyond the basics, gain hands-on experience with enterprise security tools, and continue developing into a well-rounded cybersecurity professional.

You’ll be part of our Cyber Fusion Center, helping monitor and investigate security activity, respond to threats, strengthen our security controls, and protect a growing organization.

This isn’t a role where you’ll simply watch alerts all day. You’ll have opportunities to investigate, problem-solve, work with modern security technologies, and build deeper expertise in incident response, detection engineering, identity security, and security tooling.

What's In It For Me?

• Market Value Compensation with robust bonus potential
• Unlimited PTO Plan
• Health, Vision and Dental plans for you and your family to choose from
• 401K Retirement Plan company will match 30% up to the first 6% of your contributed amount
• Life Insurance, Short-Term and Long-Term Disability
• Special Program Options FSA, EAP, Legal Services, and Identity Theft
• Working in a dynamic, collaborative, and fun environment
• Coached and supported career growth through Wrench University

What Will I Do

Monitor, Investigate & Respond

• Review, triage, and investigate security alerts from SIEM and detection platforms.
• Respond to routine and moderate-complexity security events and know when to escape more advanced incidents.
• Provide Tier 1/Tier 2 SOC support and partner with senior analysts and IT Operations on complex investigations.
• Investigate suspicious or quarantined email activity and take appropriate action.
• Document findings, actions, and remediation steps.

Work With Security Technology

• Help administer and tune tools such as Microsoft Defender, Rapid7, and SIEM platforms.
• Support the development and improvement of detection rules, alerts, and playbooks.
• Monitor security telemetry and data flowing into SIEM platforms.
• Help improve detection processes, reduce false positives, and strengthen response times.

Protect Identity & Data

• Support identity and access management, including access reviews and account administration.
• Work with technologies including Microsoft Entra ID, Microsoft 365, and Intune.
• Assist with identity security controls and data preservation activities.

Collaborate & Keep Learning

• Work across Cybersecurity, IT, managed security services, and business teams.
• Help turn security findings into clear, actionable information.
• Stay current on emerging threats, vulnerabilities, and cybersecurity best practices.
• Continue building your expertise across incident response, detection engineering, and security operations.

Do I Have What it Takes?

We're looking for someone who is curious, analytical, detail-oriented, and eager to grow.

You’ll ideally have

• 1-3 years of experience in cybersecurity, SOC operations, IT support, or another related technical role.
• A bachelor's degree or equivalent experience in Cybersecurity, Information Technology, or a related field.
• Working knowledge of cybersecurity fundamentals, including phishing, endpoint protection, networking, and identity security.
• Hands-on exposure to security tools such as SIEM, endpoint protection, vulnerability management, or email security.
• Strong analytical and problem-solving skills.
• The ability to investigate issues independently while recognizing when escalation is needed.
• Strong communication, documentation, and organizational skills.
• A collaborative approach and willingness to learn.

Even Better If You Have

• Security+, Network+, SC-900, AZ-900, or similar certifications.
• Experience with Microsoft Defender, Rapid7, Microsoft Entra ID, or Microsoft Intune.
• Exposure to incident response or cybersecurity frameworks.
• Familiarity with KQL, LEQL, SPL, or other security log-query languages.
• Basic PowerShell, Python, or automation experience.
• Experience investigating Microsoft security alerts, Entra sign-in logs, audit logs, or identity-related security incidents.