Security Analyst Co-Op (Spring 2027 Semester) / University of Cincinnati

Coretek; Cincinnati (OH); On-site; USD 60,000 - 85,000; Full time

Job summary

Coretek is seeking an entry-level Cyber Security Analyst to join a skilled team focused on protecting Coretek and client ecosystems. The role centers on initial alert triage, case setup for escalation, and helping investigate, contain, and remediate incidents.

The position values a drive to learn and grow in a fast-paced service-provider environment, with structured on-the-job training and mentoring to build proficiency across security tools and procedures.

Qualifications

• Knowledge of incident response, investigation, and forensics concepts.
• Familiarity with Windows and Linux OS including command line use.
• Solid grasp of networking fundamentals (TCP/IP).
• Awareness of common network services and client/server apps.

Responsibilities

• Respond to alerts and validate findings.
• Escalate security incidents to IR teams for investigation/remediation.
• Support incident response investigations for Coretek and customers.
• Learn log and alert analysis and triage.
• Coordinate with teams to provide incident handling support.
• Help improve incident response procedures and runbooks.
• Handle escalation via Cyber Case Management tools, SIEM, ITSM, and channels.

Skills

Incident response

Windows

Linux

Networking fundamentals

Network services

Education

Information Technology

Cyber Security

Computer Science

Tools

SIEM

ITSM

SOAR

Cyber Case Management

Job description

Join a highly skilled and motivated team of Cyber Security Professionals tasked with protecting Coretek and its customers. The Cyber Security Analyst level 1 is an entry level role that is primarily focused on responding to alerts, setting up cases for escalation, and triage. Analysts will leverage security operations tools, cyber case management and supplementary tools to investigate, contain, and remediate cyber security incidents. The Cyber Security Analyst must have a drive to learn and grow as the industry changes and Coretek adapts rapidly.

Coretek understands that a candidate may not possess all the skills required of a Security Analyst for the unique service provider space and will educate and grow the right candidate. At Coretek the desire to learn and work with in a team is a requirement of the position. Skills in other disciplines are always welcome and shows a candidate’s ability to adapt. Those with formal education are welcomed as well as those that are self-taught. Structured training as well as on the job experience is a required part of the job to bring security professionals up to speed for the complex requirements and fast paced environment of a service provider. Security Analysts must have a drive to learn and grow as the industry changes and Coretek adapts.

Responsibilities

• Respond to alerts and validate findings
• Escalate security incidents incident response teams for investigation / remediation
• Support Incident Response investigations for Coretek and Coretek customers
• Learn to perform analysis of logs and alerts
• Coordinate with appropriate teams to provide incident handling and response support
• Learn to use and improve incident response procedures & runbooks
• Handle security incident escalation via Cyber Case Management tools, SIEM, ITSM, email and phone

Requirements

• Knowledge of incident response, investigation, system forensics, or related cyber security education / self-learning
• Familiarity with Windows and Linux operating systems including command line operation
• Possess a foundation in networking fundamentals and TCP/IP
• Knowledge of common network-based services and common client/server applications

Preferred Requirements

• Excellent verbal/written communication, interpersonal and organizational skills
• Communicate effectively with varied levels of staff to develop positive working relationships
• Excellent problem-solving skills to diagnose technical issues
• Ability to learn new technology and concepts quickly
• Ability to work on a shift
• Education in incident response, forensics, cyber security case management, IT technology, networking, or related topics
• Exposure to reviewing and analyzing log data from various network and security devices
• Experience with well-known information security related tools for packet capture, network/OS fingerprinting, and communication
• Practical understanding of exploits, vulnerabilities, computer network intrusions, adversary tactics, exfiltration techniques and common knowledge
• Experience with enterprise SIEM products
• Experience with ITSM, SOAR, or Cyber Case Management Tools
• Scripting with Python, Perl, Bash and/or PowerShell a plus
• Database structures and queries, Regular Expressions a plus

Education:

Preferred Majors: Information Technology, Cyber Security, Computer Science, or related field