Security Analyst

On Demand is now Vubiquity - http://www.linkedin.com/company/vubiquity; Minneapolis (MN); Hybrid; USD 48,000 - 59,000; Full time

Benefits offered by this job

Healthcare, dental, and vision

Job summary

Vubiquity is seeking an Information Security Analyst to support an Information Security Operations team and serve as one of the first responders to security events. The contractor will monitor alerts, triage incidents, and help employees with security requests.

The role requires 2-4 years of hands-on security or IT experience, strong communication, and the ability to work with IT staff to escalate complex incidents. Hybrid work in Minneapolis is available.

Qualifications

• 2-4 years of information security, SOC, or related IT role with regular security duties.
• Hands-on experience triaging alerts in a SIEM or incidents in an ITSM ticketing system.
• Working knowledge of web filtering and reviewing URLs to unblock requests.
• Understanding of networking basics: TCP/IP, DNS, HTTP/S, proxies, firewalls, VPNs.

Responsibilities

• Monitor alerts and ticket queues related to cybersecurity and information security.
• Triage escalations from the third-party security operations center and determine false positives or hand-off to higher tier analysts.
• Participate in improving security policies or technical controls.
• Assist in incident response activities as needed.

Skills

SOC experience

SIEM triage

Networking basics

Phishing investigation

Strong communication

Multi-tasking

Education

Bachelor's degree in cybersecurity/IT

Tools

SIEM

ITSM ticketing

Proofpoint

Tenable

Job description

Job Title: Security Analyst
Job Type: Contract
Job Location: Hybrid, 4 days per week Onsite

Overview

Seeking an Information Security Analyst to support an Information Security Operations team. This person will be one of the first responders to security events across the organization.

Most of the job falls into two areas. The first is monitoring, triaging, and investigating alerts from security tools. The second is resolving security requests from employees, such as reviewing and unblocking websites, handling reports of suspicious email, and answering access and policy questions.

This role suits someone with 2-4 years of hands-on security or IT experience who likes investigating, communicates clearly with non-technical staff, and wants to deepen their skills in security operations. This person will work closely with IT staff and elevate complex incidents to senior security staff when needed.

General Responsibilities

• Monitor alerts and ticket queues related to cybersecurity and information security.
• Triage escalations from the third-party security operations center, collect relevant data, and determine false positives or facilitate hand-off to higher tier analysts.
• Participate in improving security policies or technical controls.
• Assist in incident response activities as needed.

Mandatory Skills

• 2-4 years of experience in information security, a security operations center (SOC), or a closely related IT role with regular security duties.
• Hands-on experience triaging alerts in a SIEM or incidents in an ITSM ticketing system.
• Working knowledge of web filtering, including how to review and categorize URLs and process requests to unblock them.
• Understanding of networking basics: TCP/IP, DNS, HTTP/S, proxies, firewalls, and VPNs.
• Ability to investigate phishing emails, including analyzing headers, checking URLs and attachments, and taking remediation steps.
• Strong written and verbal communication skills, including explaining security decisions to non-technical users politely and clearly.
• Ability to prioritize and manage multiple open alerts and requests at the same time.

Desired Skills

• Industry certifications such as CompTIA Security+, CySA+, GIAC (GSEC, GCIH, GCIA), or Microsoft SC-200.
• Familiarity with the MITRE ATT&CK framework.
• Scripting or automation experience with PowerShell or Python and exposure to SOAR platforms.
• Experience with email security gateways, such as Proofpoint.
• Exposure to cloud security in Azure, AWS, or Microsoft 365.
• Knowledge of vulnerability management tools, such as Tenable.
• Experience in a regulated or public-sector environment, or familiarity with frameworks such as NIST CSF, CIS Controls, or ISO 27001.
• A bachelor's degree in cybersecurity, information technology, computer science, or a related field. Equivalent experience considered.

The projected hourly range for this position is $35 to $43.

On-Demand Group (ODG) provides employee benefits which includes healthcare, dental, and vision insurance. ODG is an equal opportunity employer that does not discriminate on the basis of race, color, religion, gender, sexual orientation, age, national origin, disability, or any other characteristic protected by law.