Cybersecurity Analyst - Hybrid/Remote & Incident Response

KAHANA & FELD LLP; New York (NY); Hybrid; USD 90,000 - 140,000; Full time

Job summary

Kahana Feld seeks a Cybersecurity Analyst to safeguard the firm’s systems, networks, applications, and confidential information. You will monitor security tools, investigate alerts, support incident response and remediation, and collaborate with the CIO to complete client security questionnaires.

This role requires hands-on experience with Microsoft 365 security and related technologies, familiarity with security frameworks, and strong documentation and attention to detail.

Qualifications

• Associate’s or Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience, is required.
• Minimum of 2 years of information security experience protecting a professional services firm.
• Hands-on experience with Microsoft 365 security and technologies such as Entra ID, Intune, Defender, Azure, or comparable platforms.
• Familiarity with NIST Cybersecurity Framework, CIS Controls, ISO 27001, SOC 2, or comparable requirements.
• Ability to investigate alerts using logs, EDR tools, event monitoring systems, vulnerability scanners, or managed providers.
• Sound judgment and discretion with confidential information; certifications like Security+ or SSCP preferred but not required.

Responsibilities

• Implement, operate, and document security controls under firm policies and change-management requirements.
• Monitor security alerts, logs, dashboards, and service notifications; triage events and escalate as needed.
• Support incident response through evidence collection, investigation, containment, and remediation tracking.
• Run or coordinate vulnerability scans and track remediation actions to closure.
• Collaborate with infrastructure and applications teams to maintain endpoint, network, cloud, identity, email, and data-protection controls.
• Assist with security tools for endpoint detection and response, event monitoring, MFA, and data loss prevention.
• Support user access reviews and joiner-mover-leaver controls; investigate unusual sign-in activity.
• Complete client security questionnaires and maintain a library of approved responses and evidence.
• Track audit findings and follow up with owners until closure.
• Support third-party security reviews by collecting questionnaires and documentation.
• Assist with phishing simulations and security awareness communications.

Skills

Microsoft 365 security

Incident response

Vulnerability management

Documentation

Security frameworks familiarity

Analytical thinking

Education

Bachelor's degree in cybersecurity or related field

Tools

Entra ID

Intune

Defender

Azure

Job description

Kahana Feld seeks a Cybersecurity Analyst to safeguard the firm’s systems, networks, applications, and confidential information. You will monitor security tools, investigate alerts, support incident response and remediation, and collaborate with the CIO to complete client security questionnaires.

This role requires hands-on experience with Microsoft 365 security and related technologies, familiarity with security frameworks, and strong documentation and attention to detail.