Cybersecurity Analyst - Hybrid/Remote & Incident Response

KAHANA & FELD LLP; California; Hybrid; USD 90,000 - 130,000; Full time

Job summary

KAHANA & FELD LLP is seeking a Cybersecurity Analyst to protect the firm’s systems, networks, and confidential information. You will monitor security tools, investigate alerts, support incident response, and coordinate client security questionnaires with the CIO and infrastructure teams.

The role requires at least 2 years in information security, hands-on MS 365 security experience, and knowledge of threat controls, vulnerability management, and compliance frameworks.

Qualifications

• Associate’s or Bachelor’s degree in cybersecurity, IT, CS, or related field, or equivalent professional experience.
• 0
• Minimum 2 years of information security experience in a law firm.
• Hands-on experience with Microsoft 365 security and Entra ID, Intune, Defender, Azure, or comparable platforms.
• Knowledge of network, identity, endpoint, and email security; vulnerability management; patching; encryption; and backup protection.
• Experience completing client security questionnaires and maintaining control documentation.

Responsibilities

• Implement, operate, and document security controls under firm policies, standards, procedures, and change-management requirements.
• Monitor security alerts, logs, dashboards, and managed security service notifications; triage events and escalate as needed.
• Support incident response through evidence collection, investigation, containment, and remediation tracking.
• Run or coordinate vulnerability scans and track corrective actions.
• Maintain endpoint, network, cloud, identity, email, web, and data-protection controls.
• Assist with security tools for EDR, event monitoring, MFA, and DLP.
• Support access reviews and joiner-mover-leaver controls and investigate sign-in activity.
• Complete client security questionnaires and coordinate accurate responses.
• Maintain library of approved questionnaire responses, control docs, policies, and evidence.
• Track findings and follow up with owners until closure.
• Assist with third-party security reviews and phishing simulations.
• Maintain security documentation and metrics.
• Stay current on threats and vulnerabilities relevant to law firms.

Skills

Information security

Microsoft 365 security

Vulnerability management

Audit evidence

Security questionnaires

NIST CSF

SOC 2 / ISO 27001

Alert investigation

Security certifications

Education

Bachelor’s degree in cybersecurity/IT/CS or related field

Job description

KAHANA & FELD LLP is seeking a Cybersecurity Analyst to protect the firm’s systems, networks, and confidential information. You will monitor security tools, investigate alerts, support incident response, and coordinate client security questionnaires with the CIO and infrastructure teams.

The role requires at least 2 years in information security, hands-on MS 365 security experience, and knowledge of threat controls, vulnerability management, and compliance frameworks.