Security Analyst

Presidio, Inc.; New York (NY); Remote; USD 70,000 - 100,000; Full time

Job summary

Presidio is seeking a detail-oriented Security Analyst for a remote role focused on investigating security alerts in a Managed Detection and Response environment. The ideal candidate will have strong analytical skills, foundational threat intelligence knowledge, and the ability to communicate effectively with clients. Responsibilities include triaging security alerts, conducting incident responses, and staying updated on emerging threats.

Qualifications

• 1-3 years of hands-on experience with enterprise-level case management tools.
• Familiarity with Windows security event IDs.
• Ability to interpret security rules and pivot using indicators in SIEM/EDR tools.

Responsibilities

• Investigate and assess security alerts to determine threat severity.
• Conduct initial incident response actions including log collection.
• Provide timely updates to MDR leadership and convey findings to clients.

Skills

Analytical Thinking

Threat Intelligence

Communication Skills

Self-Motivation

Education

Bachelor's degree or equivalent work experience

Tools

SIEM platforms

Vulnerability scanning tools

Job description

Description

Presidio, Where Teamwork and Innovation Shape the FutureAtPresidio, we're at the forefront of a global technology revolution, transforming industries throughcutting-edge digital solutions and next-generation AI. We empower businesses-and their customers-to achieve more through innovation, automation, and intelligent insights.

The Role
Presidio is seeking a detail-oriented and motivated Security Analyst to join our Managed Services team. This is a remote role focused on investigating and triaging security alerts through our SOAR platform in a fast-paced, multi-tenant Managed Detection and Response (MDR) environment.

The ideal candidate will demonstrate a strong analytical mindset, foundational threat intelligence knowledge, and the ability to clearly communicate technical findings in client-facing language. Success as a Security Analyst in a fast-paced, multi-tenant MDR environment requires leveraging meticulous attention to detail, advanced pattern recognition, strong threat intelligence acumen, and clear, effective written communication to identify and respond to security threats.

Travel Requirements:

This is a remote role to reside in the Continental US and does not require any travel.

Responsibilities include:

• Security Alert Triage: Investigate and assess security alerts following defined procedures to determine threat severity and scope.


• Incident Response: Conduct initial incident response actions including log collection, asset isolation, and targeted scans; escalate confirmed incidents per protocol.


• Threat Research: Stay up to date on emerging threats, tactics, techniques, and procedures (TTPs) to support investigations.


• Client Communication: Provide timely updates to MDR leadership and convey findings to clients in plain, non-technical language.


• Documentation: Record detailed investigation steps and evidence in case management systems; draft concise, audience-appropriate client summaries.

Required Skills and Professional Experience:

• Bachelor's degree or the equivalent work experience and/or military experience


• 1-3 years of hands-on experience with enterprise-level case management tools


• Experience with SIEM platforms such as LogRhythm, Logz.io, or Elasticsearch


• Familiarity with vulnerability scanning tools like Tenable/Nessus


• Regex & Logic Fluency: Working knowledge of regular expressions and Boolean logic, enough to write, read and tweak simple patters and spot anomalies (deep mastery not required)


• Windows Security Knowledge: Familiarity with key Windows security event IDs


• Indicator Pivoting: Ability to interpret security rules and pivot using indicators in SIEM/EDR tools


• Threat Intelligence: Experience with OSINT tools and methods to verify IOCs (e.g., hashes, URLs, IPs)


• Analytical Thinking: Ability to interpret data artifacts, suggest tuning, and make evidence-based decisions


• Technical Foundation: Understanding of Windows logs, networking fundamentals, and common protocols (SMB, RDP, DNS, LDAP, SQL)


• Self-Motivation: Proactive and curious; thrives in a fast-paced, 24/7/365 shift-based environment


• Communication Skills: Strong written and verbal communication with a focus on clarity and professionalism

Preferred Skills and Professional Experience:

• Security certifications such as CySA+, GISF (SANS SEC301), SSCP, CEH, or CCNA-Security.


• Experience working in a multi-tenant MSSP/SOC environment.

Your future at Presidio
JoiningPresidiomeans stepping into aculture of trailblazers-thinkers, builders, and collaborators-who push the boundaries of what's possible. With our expertise inAI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world.

Here,your impact is real.Whether you're harnessing the power ofGenerative AI, architecting resilientdigital ecosystems, or drivingdata-driven transformation, you'll be part of a team that is shaping the future.

Ready to innovate? Let's redefine what's next-together.

About Presidio
At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio's expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information, visit www.presidio.com.

*****

Applications will be accepted on a rolling basis.

Presidio is an Equal Opportunity / Affirmative Action Employer / VEVRAA Federal Contractor. All qualified candidates will receive consideration for this position regardless of race, color, creed, religion, national origin, age, sex, citizenship, ethnicity, veteran status, marital status, disability, sexual orientation, gender identification or any other characteristic protected by applicable federal, state, and local statutes, regulations, and ordinances.

To read more about discrimination protections under Federal Law, please visit:https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf

If you have any difficulty using our online system and need an accommodation in the job application process due to a disability, please send an email to [e-mail] assistance.

Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to [e-mail].

Notice to Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our careers email address, Presidio employees or any other means. Presidio is not responsible for any fees related to unsolicited resumes/CVs.

#LI-PH1

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.
For further information, please review the Know Your Rights notice from the Department of Labor.