Security Analyst

ZealHire Inc.; Greenwich, Northern (CT, KY); Hybrid; USD 80,000 - 110,000; Full time

Job summary

ZealHire Inc. in Greenwich, CT is seeking a mid-level, hands-on security operations specialist. The role focuses on keeping security tools healthy, well-tuned, and well-documented while owning recurring tasks with minimal oversight.

You will maintain tool health, build runbooks for ISMS alignment, and document changes for audits. The ideal candidate has foundational security knowledge and is comfortable working in a hybrid environment with two in-office days.

Qualifications

• CompTIA Security+ and/or CySA+ required or actively pursuing.
• Foundational security knowledge: CIA triad, common attack types, networking fundamentals.
• Familiarity with Windows and the Microsoft 365 / Entra / Azure ecosystem.
• Strong attention to detail and methodical, organized approach.
• Reliability and following procedures with minimal oversight.
• Clear written communication for documentation and reporting.

Responsibilities

• Tool health monitoring and maintenance to ensure security tooling reports are healthy.
• Document recurring issues, build runbooks and maintain asset inventories for ISMS.
• Stay current with tool features and vendor updates to flag adoption opportunities.
• Tune alerts to reduce false positives and maintain approve/allow lists and mail quarantines.
• Execute security awareness training and phishing-simulation campaigns and report results.
• Generate recurring tool health, vulnerability, and security metrics reports.

Skills

CompTIA Security+

CySA+

CIA triad

Windows

Microsoft 365

Azure

Entra

Job description

USC/GCNeed LinkedIn, VISA DL9-12 years of profiles

Greenwich OR Palm Beach- LocalS

Hybrid 2 days in the office

I would say its a solid mid level role.

This is a hands-on operational role centered on keeping our tools healthy, well-tuned, and well-documented. We are looking for someone organized, detail-oriented, and reliable, with a foundational security background (Security+ and/or CySA+) and the discipline to own recurring tasks and keep them on track with minimal oversight.

Core Responsibilities

Tool health monitoring & maintenance

• Proactively watch for and resolve (or elevate) tool-health issues, such as:
• oServers or endpoints that stop reporting into Sumo Logic and our other security tools.
• oTenable Vulnerability Scans and Maintenance
• oDefender, ThreatLocker, or other agents going offline, outdated, or missing.
• oFortinet / FortiSASE health and connectivity issues.
• Run routine configuration and policy reviews to catch drift and gaps.

Documentation

• Document recurring issues, their causes, and how they were resolved.
• Build and maintain runbooks, SOPs, and asset inventories, keeping them current as things change — supporting our ISO 27001:2022 ISMS.
• Keep clean records of configuration changes and exceptions.
• Gather and organize evidence for our Internal Audit team — configurations, logs, reports, and records — to support ISMS and audit activities.

Staying current

• Keep up with new features and capabilities across our tools (release notes, vendor updates) and flag/document anything worth adopting.

Routine operations

• Tune alerts to reduce false positives and noise, under direction.
• Maintain allowlists, exceptions, and approval requests.
• Review and clean up email quarantines (Mimecast, Abnormal AI, Defender for Office 365).
• Administer KnowBe4 — run security awareness training and phishing-simulation campaigns, track completion, and report results.

Reporting

• Generate recurring reports across the stack — tool health and coverage, alert volumes and trends, vulnerability status, email security metrics, and phishing/training results.
• Produce summary reports for management and metrics/KPIs that feed our ISMS reviews.
• Build standardized, reusable report templates so recurring reports are consistent and efficient to produce each cycle.

What to Look For in a Candidate

Required

• CompTIA Security+ and/or CySA+ (or actively pursuing).
• Foundational security knowledge: CIA triad, common attack types, networking fundamentals (TCP/IP, DNS, ports), basic log review.
• Familiarity with Windows and the Microsoft 365 / Entra / Azure ecosystem.
• Strong attention to detail and a methodical, organized approach.
• Reliability and follow-through on recurring tasks; comfortable following procedures and asking questions.
• Clear written communication for documentation and reporting.

Nice to have

• Hands-on exposure to any of our tools (listed below) — we don't expect all of them.
• Experience working alongside an MDR/MSSP or managed SOC.

Greenwich, Connecticut, United States 06831 +1 more location

Salary Range:

$000,000 – $000,000 Salary range is not shown on the candidate portal