Cybersecurity Analyst: Threat Detection & Incident Response

Devitechs; Texas; On-site; USD 70,000 - 90,000; Full time

Job summary

A cybersecurity firm in Wisconsin is seeking an experienced security analyst to monitor security events and incidents. Responsibilities include investigating breaches, conducting vulnerability scans, and coordinating with IT teams for risk mitigation. The ideal candidate should have a strong background in using SIEM tools and a good understanding of compliance standards such as NIST and ISO. This role offers a pivotal position in enhancing the organization's security posture.

Qualifications

• Proficiency with SIEM tools for security monitoring.
• Experience in incident response and threat mitigation.
• Familiarity with security compliance standards.

Responsibilities

• Monitor security events, logs, and alerts using SIEM tools.
• Investigate suspicious activities and security breaches.
• Conduct vulnerability scans and recommend risk mitigation.

Skills

SIEM tools proficiency (e.g., Splunk, Azure Sentinel, QRadar)

Incident response and risk mitigation

Knowledge of compliance standards (NIST, ISO 27001, SOC2, HIPAA, PCI DSS)

Automated detection scripts development

Cloud security and posture assessment

Job description

✔️ Monitor security events, logs, and alerts using SIEM tools like Splunk, Azure Sentinel, or QRadar.

✔️ Investigate suspicious activities, security breaches, and potential threat vectors.

✔️ Conduct vulnerability scans and apply risk mitigation based on findings.

✔️ Develop, implement, and maintain incident response processes and playbooks.

✔️ Monitor firewalls, IDS/IPS, endpoint security, and threat-intelligence platforms.

✔️ Perform root-cause analysis for security incidents and recommend preventive measures.

✔️ Maintain compliance with NIST, ISO 27001, SOC2, HIPAA, or PCI DSS standards.

✔️ Conduct phishing simulations and cybersecurity awareness training.

✔️ Create and maintain security documentation, reports, and dashboards.

✔️ Configure access controls, MFA, identity management, and privileged accounts.

✔️ Collaborate with IT teams to patch security vulnerabilities and software flaws.

✔️ Track emerging threats, malware patterns, and zero-day vulnerabilities.

✔️ Develop automated detection scripts for faster threat identification.

✔️ Evaluate and recommend new security tools and technologies.

✔️ Support forensic investigations and evidence gathering when needed.

✔️ Secure cloud environments and perform cloud posture assessments.

✔️ Monitor data loss prevention (DLP) systems and insider-threat indicators.

✔️ Coordinate with external auditors, vendors, and regulatory bodies.

✔️ Ensure secure configuration of servers, endpoints, and applications.

✔️ Provide post-incident analysis and continuous security improvements.