Cybersecurity Incident Response Team Security Analyst II

Cybersecurity Jobs; Saint Petersburg (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

Jabil Circuit in Saint Petersburg, FL is seeking a Cybersecurity Incident Response Team Security Analyst II to monitor, investigate, and respond to security events across global operations. This onsite role emphasizes advanced monitoring, analysis, and helping keep security tooling effective through reporting and continuous improvement.

You will mentor staff, participate in on-call coverage, and support IT security and customer audit activities while differentiating events from incidents to

Qualifications

• 3+ years of experience in Security Operations or related field.
• Bachelor's degree in CS/IS or related field plus 3-5 years in Security Operations.
• Security+ or GSEC or GCIH certifications are preferred.
• Strong working knowledge of perimeter technologies and security tooling.

Responsibilities

• Respond to security events for 24/7 global operations; on-call as required.
• Perform advanced monitoring of security events from device logs.
• Investigate events by correlating data from multiple sources for risk assessment.
• Conduct advanced incident analysis using logs and monitoring activity.
• Support large-scale incidents and provide remediation guidance.
• Create and refine log monitoring reports and basic investigative tools.

Skills

Problem solving

Executive communication

Leadership

Pressure tolerance

Education

Bachelor's degree in CS/IS or related field

Tools

SIEM

NetFlow

IDS/IPS

Endpoint security

DLP

Firewalls

Proxies

Packet capture

Python

PowerShell

PERL

Splunk SPL

Job description

Jabil Circuit is hiring a Cybersecurity Incident Response Team Security Analyst II in Saint Petersburg, FL (onsite). This role supports advanced monitoring, investigation, and incident response across global operations, helping keep security tooling effective through reporting, analytics, and continuous improvement. You will also contribute to staff mentoring and operational readiness, including on-call coverage as required.

Responsibilities

• Support 24/7 global operations by responding to security events in the environment; on-call as required.
• Perform advanced monitoring of security events by studying and reviewing device security logs.
• Investigate events by correlating data from multiple sources to determine risk to Jabil.
• Conduct advanced incident analysis using logs and monitoring activities.
• Assist in large-scale incidents including investigation and response, and provide guidance on remediation.
• Create and refine log monitoring reports, searches, or basic investigative tools to strengthen monitoring capabilities.
• Handle escalations from SOC Security Analysts I.
• Analyze the environment, including activities such as port scans, activity monitoring, and intrusion detection.
• Perform intermediate-level Health Checks and routine administration for security tools.
• Differentiate between security events vs. incidents to initiate the appropriate incident response actions.
• Participate in IT security and customer audit activities.
• Provide mentoring and education for security staff members.
• Drive continuous improvement through trend reporting analysis and metrics management.
• Ensure procedures and work instructions remain efficient and not redundant.
• Identify and implement new analytic methods to detect threats more effectively.
• Maintain confidentiality in all security activities for both internal and customer-specific work.
• Interpret instructions provided in written, oral, diagram, or schedule form.
• Lead small projects or initiatives as assigned, and perform other duties as required.

Requirements

• Ability to define problems, collect data, establish facts, and draw valid conclusions.
• Ability to communicate analytical data to varied audiences, including executives.
• Strong interpersonal and leadership skills to influence and build credibility as a peer.
• Ability to perform under significant enterprise-wide pressure with a sense of urgency.
• 3+ years of experience, or a Bachelor’s degree in Computer Science, Information Systems, or related field plus 3-5 years Security Operations, Network Administration, or equivalent knowledge.
• Security related certifications: Security+, GSEC, or GCIH.
• Strong working knowledge of perimeter technologies such as firewalls and proxies.
• Strong working knowledge of security tools including SIEM, NetFlow, IDS/IPS, endpoint solutions, and DLP.
• Strong working knowledge of networking including TCP/IP, network architecture, and packet capture and analysis.
• Advanced technical knowledge of operating systems, network services, applications, and security logging.

Preferred Qualifications

• Master’s degree in Information Security, Cybersecurity, or Computer Network Defense.
• Relevant security certifications a plus: GCIA, GCED, GMON, CEH, CCNA, CySA+.
• Previous experience in scripting or programming (Python, PowerShell, PERL, Splunk SPL).
• Direct experience in an enterprise-level Cyber Incident Response Team or Security Operations Center.

Technologies

• Security+: GSEC, GCIH
• Firewalls, proxies
• SIEM, NetFlow, IDS/IPS
• Endpoint solutions, DLP
• TCP/IP, packet capture
• Python, PowerShell, PERL, Splunk SPL