Cybersecurity Operations Analyst (Hybrid) – Incident Response

Star Group; Town of Woodbury (NY); Hybrid; USD 85,000 - 100,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k)

Paid time off, holidays

Job summary

Star Group in Woodbury, NY is seeking a mid-level Cybersecurity Analyst to support day-to-day security operations, monitoring, incident response, vulnerability management, and compliance evidence across corporate and field environments.

This role offers exposure to endpoint protection, NAC, secure email gateway, PAM, SIEM/SOAR, and vulnerability management within a lean, high-ownership team, with opportunities to contribute to security policy development and cross-functional projects.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field, or equivalent experience.
• 3–5 years hands-on security operations experience.
• Experience with two of: EDR/antivirus, SIEM/SOAR, NAC, PAM, vulnerability tools, allowlisting, or email security gateways.
• Experience with compliance programs for publicly traded companies is preferred.

Responsibilities

• Monitor security alerts and events from EDR, NAC, SIEM/SOAR, ZTA, email security, and DLP platforms; triage per incident response playbooks.
• Analyze phishing reports, malware alerts, and suspicious activity; assist with containment and remediation.
• Support tabletop exercises and post-incident reviews; contribute to after-action reports.

Skills

EDR/antivirus platforms

SIEM/SOAR

Network Access Control

Privileged Access Management

Vulnerability scanning tools

Application allowlisting

Email security gateways

PowerShell/Python scripting

Windows AD / Entra ID

Networking fundamentals

Education

Bachelor's degree in Cybersecurity/IT/CS

3–5 years hands-on security operations

Tools

EDR solutions

SIEM/SOAR tools

NAC systems

PAM tooling

Vulnerability scanners

Job description

Star Group in Woodbury, NY is seeking a mid-level Cybersecurity Analyst to support day-to-day security operations, monitoring, incident response, vulnerability management, and compliance evidence across corporate and field environments.

This role offers exposure to endpoint protection, NAC, secure email gateway, PAM, SIEM/SOAR, and vulnerability management within a lean, high-ownership team, with opportunities to contribute to security policy development and cross-functional projects.