Cybersecurity Analyst — Hybrid/Remote

Kahana Feld; Irvine (CA); Hybrid; USD 90,000 - 115,000; Full time

Job summary

Kahana Feld is seeking a Cybersecurity Analyst to protect the firm’s systems, networks, and data. The role involves monitoring security tools, investigating alerts, and supporting incident response and remediation, in collaboration with the CIO and infrastructure teams.

The ideal candidate will have at least 2 years of information security experience, hands-on with Microsoft 365 security products, and familiarity with standard security frameworks.

Qualifications

• Associate’s or Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience, is required.
• Minimum of 2 years of information security, cybersecurity, or security-focused information technology experience supporting a law firm.
• Hands-on experience with Microsoft 365 security and technologies such as Entra ID, Intune, Defender, Azure, or comparable platforms.
• Working knowledge of network, identity, endpoint, and email security; vulnerability management; patching; encryption; and backup protection.
• Experience completing client security questionnaires, collecting audit evidence, maintaining control documentation, or supporting security and compliance reviews.
• Familiarity with the NIST Cybersecurity Framework, CIS Controls, ISO 27001, SOC 2, or comparable security requirements.
• Ability to investigate alerts using logs, endpoint detection and response tools, event monitoring systems, vulnerability scanners, or managed security providers.
• Strong attention to detail, documentation, written communication, organization, and follow-through, with the ability to manage multiple assigned tasks and deadlines.
• Sound judgment, discretion, and a service-oriented approach when handling confidential information; Security+, SSCP, or a comparable certification is preferred but not required.

Responsibilities

• Implement, operate, and document security controls under approved firm policies, standards, procedures, and change-management requirements.
• Monitor security alerts, logs, dashboards, and managed security service notifications; triage events, document findings, and elevate issues under established procedures.
• Support incident response through evidence collection, investigation, containment, user coordination, documentation, and remediation tracking.
• Run or coordinate vulnerability scans, validate findings, assign remediation tasks, and track corrective actions through closure.
• Work with the infrastructure and applications teams to maintain endpoint, network, cloud, identity, email, web, and data-protection controls.
• Assist with security tools for endpoint detection and response, event monitoring, email protection, multifactor authentication, mobile device management, and data loss prevention.
• Support user and privileged access reviews, joiner-mover-leaver controls, and investigation of unusual sign-in activity.
• Complete client and prospective-client security questionnaires by gathering current information and coordinating accurate, consistent, and timely responses.
• Maintain an organized library of approved questionnaire responses, control descriptions, supporting evidence, policies, certifications, and other due-diligence materials.
• Track findings from audits, tests, assessments, client reviews, and incidents, and follow up with assigned owners until completion.
• Support third-party security reviews by collecting questionnaires, reviewing available documentation, recording findings, and escalating concerns.
• Assist with phishing simulations, security awareness communications, user training, and follow-up coaching for employees who need additional guidance.
• Maintain operating procedures, system records, incident notes, knowledge base articles, metrics, and other security documentation.
• Stay current on relevant threats, vulnerabilities, product updates, and other law-firm security concerns.
• Perform other assigned security duties.

Skills

Attention to detail

Written communication

Documentation

Organization

Discretion

Education

Bachelor's degree in cybersecurity/IT

Tools

Microsoft 365 Security

Entra ID

Intune

Defender

Azure

Job description

Kahana Feld is seeking a Cybersecurity Analyst to protect the firm’s systems, networks, and data. The role involves monitoring security tools, investigating alerts, and supporting incident response and remediation, in collaboration with the CIO and infrastructure teams.

The ideal candidate will have at least 2 years of information security experience, hands-on with Microsoft 365 security products, and familiarity with standard security frameworks.