Entry-Level Cybersecurity Analyst I (Hybrid)

Yulista Holding; Huntsville (AL); Hybrid; USD 55,000 - 75,000; Full time

Job summary

Yulista Holding in Huntsville, AL is seeking an entry-level Cybersecurity Analyst I to monitor security events, triage alerts, and assist with incident response under supervision. You will use Microsoft Defender, Sentinel, and Purview to safeguard enterprise systems and support compliance efforts.

The role emphasizes vulnerability management, documentation, and participation in phishing awareness and runbooks.

Qualifications

• 0–2 years of handson cybersecurity or IT operations experience.
• Baseline certification: CompTIA Security+ (required or obtained within 6 months of hire).
• Eligibility to obtain/maintain DoD Secret clearance (active Secret preferred).
• Ability to meet DoD 8140/8570 IAT II requirements within 6 months of hire.

Responsibilities

• Monitor SIEM alerts (Microsoft Sentinel) and triage severities.
• Review Defender EDR alerts, collect evidence, isolate endpoints per playbooks.
• Assist with vulnerability scanning (Tenable/Qualys) and track remediation.
• Maintain tickets and documentation for incidents, changes, and controls.
• Support IAM reviews, enforce least privilege and recertifications.
• Execute baseline hardening and configuration checks on endpoints/servers.
• Provide evidence for compliance audits (NIST 800-171; CMMC Level 2).
• Participate in phishing simulations and end-user security awareness.
• Draft or improve SOPs, checklists, and runbooks.

Skills

Cybersecurity fundamentals

Hands-on IT operations

Team collaboration

Education

Associate's or Bachelor's in Cybersecurity/IT/CS

Tools

Microsoft Defender

Microsoft Sentinel

Tenable/Qualys

Job description

Yulista Holding in Huntsville, AL is seeking an entry-level Cybersecurity Analyst I to monitor security events, triage alerts, and assist with incident response under supervision. You will use Microsoft Defender, Sentinel, and Purview to safeguard enterprise systems and support compliance efforts.

The role emphasizes vulnerability management, documentation, and participation in phishing awareness and runbooks.