IT Security Analyst

Kairospower; EUA; Híbrido; USD 90 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical, dental, and vision coverage

Paid vacation

Retirement savings

Pre-tax spending benefits

Resumo da oferta

Kairospower is seeking a Security Operations professional to monitor and secure a multi-site hybrid IT environment. You will analyze SIEM alerts, coordinate containment, and drive vulnerability remediation across on-prem, cloud, and SaaS platforms.

The role emphasizes identity and access security, MFA enforcement, and maintaining security controls while collaborating with IT and external providers to reduce risk. Some audits and documentation are required.

Qualificações

• Four+ years in IT security or related field.
• Experience investigating security events with SIEM, EDR, and vulnerability scanners.
• Experience with identity and access security including MFA and SSO.
• Familiarity with NIST/CMMC or ISO 27001 preferred.

Responsabilidades

• Monitor networks and cloud platforms for suspicious activity and investigate alerts.
• Onboard systems to SIEM, validate logs, document incidents, coordinate containment.
• Run vulnerability scans and prioritize remediation with IT teams.
• Maintain access controls, MFA, and endpoint security policies.
• Support audits by collecting evidence and reporting incidents.
• Coordinate security work with service providers.

Conhecimentos

SIEM monitoring

Incident response

Vulnerability management

Access control

Endpoint security

Formação académica

Bachelor's in IT or Cybersecurity

Ferramentas

Microsoft 365

Entra ID

EDR tools

Firewall

Descrição da oferta de emprego

Role overview

Support cybersecurity operations across a multi-site, hybrid IT environment that includes on-premises systems, cloud services, and SaaS applications. The role covers monitoring, incident response, vulnerability remediation, security controls, and compliance, working with technical teams and external providers to reduce risk.

Responsibilities

• Monitor networks, systems, cloud platforms, and SaaS services for suspicious activity; investigate alerts from SIEM, endpoint, firewall, and identity tools.


• Onboard systems into the SIEM, validate log collection, document incidents, and coordinate containment and remediation, escalating higher-risk events as needed.


• Run vulnerability scans, assess and prioritize findings, report risks, and track remediation through completion with infrastructure teams.


• Maintain security controls and policies for access, endpoint protection, encryption, MFA, and remote connectivity; review permissions and privileged accounts.


• Support audits and control assessments by collecting evidence, maintaining security documentation, and reporting on incidents, vulnerabilities, and remediation.


• Coordinate security work with service providers and support security awareness efforts.

Requirements

• A degree in computer science, IT, cybersecurity, or a related area, or an equivalent combination of education, training, certifications, and experience.


• At least four years in IT security, cybersecurity operations, security operations, or a closely related technical role.


• Practical experience investigating security events with SIEM, endpoint detection and response, vulnerability scanning, firewall, and ticketing tools.


• Experience with identity, access, and endpoint security, such as Microsoft 365, Entra ID, single sign-on, MFA, endpoint management, or zero-trust initiatives.


• Experience in vulnerability management, incident response, or security control administration.

Nice to have

• Familiarity with NIST 800-171, CMMC, ISO 27001, or similar frameworks; cybersecurity certification; or experience in a regulated, government, engineering, manufacturing, or energy environment.

Benefits and work setup

• Hybrid, multi-site IT environment. Some weekend or extended-hours work may be needed for critical timelines.


• The listing describes medical, dental, and vision coverage, paid vacation, retirement savings, and pre-tax spending benefits.


• The role involves access to information subject to U.S. Department of Energy export-control requirements; authorization to access that information is required.