Cybersecurity Operations Analyst

Jacklinksproteinsnacks; Minneapolis (MN); Presencial; USD 70.000 - 110.000; Jornada completa

Descripción de la vacante

Link Snacks seeking a Cybersecurity Operations Analyst to monitor, triage, investigate, and respond to security alerts across distributed environments. The role requires hands-on incident response, vulnerability management, and collaboration with IT, security providers, and end users to strengthen the organization's security posture.

The ideal candidate has 2+ years in cybersecurity operations, experience with Microsoft Defender/Sentinel and AD/Entra ID, and a solid ability to analyze logs and

Formación

• Bachelor's degree in Cybersecurity, Information Technology, or related field or equivalent experience.
• 2+ years of hands-on cybersecurity operations experience.
• Strong foundation in alert triage, incident response, and vulnerability remediation support.
• Experience with ticketing systems, security consoles, endpoint tools, identity platforms, and scripting or query basics.
• Proficiency with Defender, Sentinel, M365 security tools, AD, Entra ID, and Nessus or similar security tech.
• Ability to analyze logs, alerts, indicators of compromise, and endpoint telemetry to support timely decisions.
• Proven ability to investigate alerts, document findings, and coordinate incident response.
• Knowledge of vulnerability management, endpoint security, phishing response, access control, and security technologies.
• Ability to manage cybersecurity tickets and coordinate remediation across teams.
• Familiarity with ISO 27001, NIST, SOC2 and vendor coordination during investigations.

Responsabilidades

• Monitor, triage, investigate, and respond to cybersecurity alerts from SIEM, EDR, MDR, cloud security, and more.
• Support and maintain MDR, EDR, AV, and security tooling across cloud, endpoint, and network environments.
• Perform incident response activities including gathering evidence, scoping, containment, remediation tracking, and follow-up.
• Create security incident reports and present impacts, actions, remediation status, and lessons learned to stakeholders.
• Optimize SIEM log ingestion and data sources to reduce noise and improve visibility.
• Support vulnerability management by validating findings and coordinating remediation with IT and OT teams.
• Respond to security-related helpdesk tickets such as phishing, endpoint concerns, access questions, and secure configuration guidance.
• Coordinate with MSPs, internal teams, vendors, and stakeholders to resolve security events promptly.
• Assist third-party risk management with reviewing vendor security data and remediation tracking.
• Provide user education on phishing, secure access, and safe technology use.
• Other duties as assigned.

Conocimientos

Cybersecurity operations

Incident investigation

Log analysis

Ticket management

Compliance standards

Vendor coordination

Encryption basics

Security incident response

Phishing analysis

Educación

Bachelor's degree

Herramientas

Microsoft Defender

Microsoft Sentinel

Microsoft 365 security tools

Active Directory

Entra ID

Phosphorus

Tenable Nessus

Descripción del empleo

Link Snacks is seeking a Cybersecurity Operations Analyst to join our Global IT organization. This role is responsible for monitoring, triaging, investigating, and responding to cybersecurity alerts across our distributed technological environments. The Cybersecurity Operations Analyst will serve as a frontline responder for security events, helping protect the organization by rapidly identifying suspicious activity and supporting containment, remediation, and recovery efforts.

This position requires strong analytical skills, attention to detail, and hands-on experience working with security tools, ticketing systems, and operational support processes. In addition to incident response and alert handling, the role will support vulnerability management activities and assist with cybersecurity-related helpdesk tickets, end-user security support, and coordination with infrastructure, network, application, OT, and external security service providers.

KEY RESPONSIBILITIES

• Monitor, triage, investigate, and respond to cybersecurity alerts generated by SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms.
• Support the security operations environment, including Microsoft Sentinel SIEM, Data Collection Rules, data collectors, data sources, alert logic, and related operational components.
• Support and maintain MDR, EDR, AV and other security tools across cloud, endpoint, and network security.
• Perform incident response activities, including evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up.
• Identify security gaps in the environment and recommend improvements to the organizational incident response process (playbooks, policies, procedures, etc.).
• Create security incident reports and present them to business stakeholders to communicate business impact, response actions, remediation status, and lessons learned.
• Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies.
• Support vulnerability management processes by reviewing scan results, validating findings, prioritizing remediation, tracking exceptions, and coordinating remediation with infrastructure, application, network, and OT teams.
• Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and secure configuration guidance.
• Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely resolution of security events.
• Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating cybersecurity follow-up with vendors and internal stakeholders.
• Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use.
• Perform other duties as assigned.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
• 2 + years of hands-on experience in cybersecurity operations, security monitoring, incident response, vulnerability management, IT support, or related technical operations.
• Strong foundation in cybersecurity operations, including alert triage, incident response, endpoint security, identity security, phishing analysis, and vulnerability remediation support.
• Experience using ticketing systems, security consoles, endpoint tools, identity platforms, and basic scripting or query languages to investigate and document security issues.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra ID, Phosphorus, Tenable Nessus, or similar enterprise security technologies.
• Ability to analyze logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events, and vulnerability findings to support timely security decisions.
• Proven ability to investigate cybersecurity alerts, document findings, elevate risks, and support incident response activities in a timely and accurate manner.
• Working knowledge of vulnerability management, endpoint security, identity security, phishing response, access control, and common enterprise security technologies.
• Ability to manage cybersecurity support tickets, communicate status clearly, and coordinate remediation activities across technical teams.
• Experienced in working with security frameworks and standards such as ISO 27001, NIST, and SOC2.
• Capable of working with security service providers, internal IT teams, vendors, and end users during security investigations and support requests.
• Strong understanding of cybersecurity principles, risk management, encryp