Cybersecurity Operations Analyst

Cybersecurity Jobs; Minneapolis (MN); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Medical, dental and vision benefits

Life and disability insurance

401k participation

Paid holidays

Paid time off

Annual incentive and program-specific

Job summary

Link Snacks is seeking a Cybersecurity Operations Analyst to join its Global IT organization in Minneapolis, MN. You will monitor alerts, investigate incidents, and coordinate response across internal teams and external providers.

You will work with SIEMs like Microsoft Defender/Sentinel, EDR, vulnerability data, and incident reporting while supporting security awareness and governance across the enterprise. Occasional after-hours support and travel up to 10% required.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field or equivalent experience.
• 2+ years in cybersecurity operations, monitoring, or incident response.
• Experience with security tools and ticketing systems for documenting issues.
• Familiarity with ISO 27001, NIST, SOC2 guidelines.

Responsibilities

• Monitor, triage, investigate, and respond to cybersecurity alerts from SIEM, EDR, MDR, and other platforms.
• Support security operations including SIEM operations, data collection rules, and data sources.
• Maintain MDR/EDR/AV tools across cloud, endpoint, and network security.
• Assist incident response with evidence gathering, scoping, containment, remediation, and post-incident follow-up.
• Identify security gaps and recommend improvements to incident response processes and playbooks.
• Create security incident reports for business stakeholders detailing impact and remediation.

Skills

SIEM

EDR

Incident response

Phishing analysis

Vulnerability remediation

Ticketing systems

Cloud security

Endpoint security

Identity security

Education

Bachelor's degree in Cybersecurity or IT

Tools

Microsoft Defender

Microsoft Sentinel

Power BI

Tenable Nessus

Active Directory

Entra ID

Job description

Link Snacks is hiring a Cybersecurity Operations Analyst within its Global IT organization to support day-to-day cybersecurity monitoring and response. The role focuses on alert monitoring, investigation, incident support, and coordination across internal IT teams and external security providers.

Key Responsibilities

• Monitor, triage, investigate, and respond to cybersecurity alerts from SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms.
• Support the security operations environment, including Microsoft Sentinel SIEM operations, Data Collection Rules, data collectors, data sources, alert logic, and related components.
• Support and maintain MDR, EDR, AV, and other security tools across cloud, endpoint, and network security.
• Assist with incident response activities such as evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up.
• Identify security gaps and recommend improvements to organizational incident response processes, including playbooks, policies, and procedures.
• Create security incident reports and present them to business stakeholders, covering business impact, response actions, remediation status, and lessons learned.
• Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies.
• Support vulnerability management by reviewing scan results, validating findings, prioritizing remediation, tracking exceptions, and coordinating remediation with infrastructure, application, network, and OT teams.
• Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and guidance for secure configurations.
• Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely event resolution.
• Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating follow-up with vendors and internal stakeholders.
• Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use.
• Perform other duties as assigned.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
• 2+ years of hands-on experience in cybersecurity operations, security monitoring, incident response, vulnerability management, IT support, or related technical operations.
• Strong foundation in cybersecurity operations, including alert triage, incident response, endpoint security, identity security, phishing analysis, and vulnerability remediation support.
• Experience using ticketing systems, security consoles, endpoint tools, identity platforms, and basic scripting or query languages to investigate and document security issues.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra ID, Phosphorus, Tenable Nessus, or similar enterprise security technologies.
• Ability to analyze logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events, and vulnerability findings to support timely security decisions.
• Proven ability to investigate cybersecurity alerts, document findings, escalation risks, and support incident response activities accurately and in a timely manner.
• Working knowledge of vulnerability management, endpoint security, identity security, phishing response, access control, and common enterprise security technologies.
• Ability to manage cybersecurity support tickets, communicate status clearly, and coordinate remediation activities across technical teams.
• Experience working with security frameworks and standards such as ISO 27001, NIST, and SOC2.
• Capable of collaborating with security service providers, internal IT teams, vendors, and end users during security investigations and support requests.
• Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control.
• In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems.
• Familiarity with security technologies and tools, including SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies.
• Knowledgeable in security design, technical governance, and third-party auditing practices.
• Ability to communicate complex technical issues clearly to both technical and non-technical audiences.
• Demonstrated discretion in handling sensitive and confidential information.
• Strong adaptability, time management, and independent problem-solving skills.
• Ability to remain composed under pressure and provide after-hours support when necessary.
• Willingness to travel up to 10% for training and business-related activities.

Technologies

• SIEM, EDR, MDR
• Microsoft Sentinel, Microsoft Defender
• Data Collection Rules
• Microsoft 365 security tools
• Active Directory, Entra ID
• Phosphorus
• Tenable Nessus
• AV
• Ticketing systems, security consoles, endpoint tools
• Identity platforms, basic scripting or query languages
• ISO 27001, NIST, SOC2
• Power BI, Fabric
• BeyondTrust, Palo Alto, Cisco

Benefits

• Medical, dental and vision benefits
• Life and disability insurance
• 401k participation
• Paid holidays
• Paid time off
• Annual incentive and program-specific awards

Preferred Qualifications

• Experience with platforms such as Microsoft Sentinel, Microsoft Defender, Tenable Nessus, BeyondTrust, Palo Alto, Cisco, phishing analysis tools, or other cybersecurity operations technologies.
• Experience supporting security incidents from identification through containment, remediation, documentation, and closure.
• Cybersecurity certifications such as CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
• Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments.
• Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting.

Compensation and Additional Information

• Starting salary: USD 80,000 - 110,000 per year.
• Base pay is one component of Link Snacks Total Rewards for Team Members.
• Other rewards may include annual incentive and program-specific awards.

Location and Work Environment

Minneapolis, MN (onsite). The work environment is a plant/office setting with varying temperatures and noise levels. Exposure may include manufacturing equipment movement and wet or slippery floors, with most work performed in a climate-controlled office. Travel may be required.

Physical Demands

• Regularly required to sit, use hands to finger, handle, or feel, and talk or hear.
• Occasionally required to stand, walk, and reach with hands and arms.
• Must occasionally lift and/or move up to twenty-five pounds.
• Specific vision abilities required include close vision.