Remote Security Analyst I - Threat Detection & Incident Response

Ntiva, Inc.; Oregon; Hybrid; USD 49,000 - 70,000; Full time

Benefits offered by this job

Medical, Dental and Vision coverage

401k + company match

Paid Time Off

Education Reimbursement

Employee Referral Program

Flexible holidays

Job summary

Ntiva, Inc. is seeking a Security Analyst I for a remote role in the United States. You will monitor security dashboards, respond to alerts, and help secure client assets.

The position requires 1–2 years in cybersecurity and hands-on experience with EDR/SIEM tools, plus strong customer-service skills. Join a collaborative security team and participate in on-call rotations, with occasional travel to Centers of Excellence if needed.

Qualifications

• 1-2 years of experience in cybersecurity.
• 3-5 years in an IT role including log analysis, account/access management, or endpoint troubleshooting.
• Full-time role with standard hours; no outside employment.
• CySA+, GCIH, or SC-200 certification (or actively pursuing).
• Hands-on exposure to at least one EDR/SIEM platform (e.g., SentinelOne, CrowdStrike, Microsoft Defender, Microsoft Sentinel).
• Direct hands-on experience using ConnectWise Manage for ticket documentation with audit-ready incident notes.

Responsibilities

• Monitor security dashboards, queues, and alerts to detect threats.
• Investigate security alerts and secure user accounts.
• Escalate incidents with clear information to Level 2 Analysts.
• Manage routine changes to security tools and exemptions in the EDR.
• Collaborate with security teammates and engineers.
• Engage with users/clients to gather details and provide guidance.
• Document investigations and actions in ConnectWise.

Skills

Cybersecurity basics

Incident response

Log analysis

Account management

Endpoint troubleshooting

English communication

Tools

ConnectWise Manage

SentinelOne

CrowdStrike

Microsoft Defender

Microsoft Sentinel

Job description

Ntiva, Inc. is seeking a Security Analyst I for a remote role in the United States. You will monitor security dashboards, respond to alerts, and help secure client assets.

The position requires 1–2 years in cybersecurity and hands-on experience with EDR/SIEM tools, plus strong customer-service skills. Join a collaborative security team and participate in on-call rotations, with occasional travel to Centers of Excellence if needed.