Security Analyst II

Crutchfield Corporation; Charlottesville (VA); Híbrido; USD 75.000 - 85.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

Dental insurance

Vision insurance

401K retirement plan

Tuition reimbursement

Descripción de la vacante

Crutchfield Corporation in Charlottesville, VA is seeking a Security Analyst II to prevent, detect, and remediate cybersecurity issues. You will work with operational teams to troubleshoot security technologies, review incidents, and produce clear reports for stakeholders.

The role emphasizes communication, collaboration, and ongoing learning in a hybrid 3-days-onsite model. Qualifications include 2+ years in cybersecurity or related roles, strong problem-solving, and knowledge of security best

Formación

• At least two years in a full-time cybersecurity role or an equivalent combination of cybersecurity certifications and experience in a security-adjacent technical role such as systems or network administration
• Strong analytical, troubleshooting, and problem-solving skills
• Working knowledge of information security principles and best practices
• Strong verbal and written communication skills
• Ability to work effectively both independently and as part of a team
• Self-motivation, curiosity, adaptability, and a willingness to learn and share information

Responsabilidades

• Monitor and manage alerts from SIEM systems, server and firewall logs, network traffic, EDR platforms, email security gateways, and secure web gateways
• Review threat intelligence and other information from trusted sources to stay informed about current cyber threats
• Maintain awareness of evolving threats, technologies, and defensive practices through training and independent research
• Investigate security incidents by collecting and analyzing logs, alerts, and evidence
• Identify and implement measures to contain, mitigate, and remediate security incidents
• Follow and help maintain Crutchfield incident response policies, plans, and procedures
• Prepare clear written reports about security threats, incidents, findings, and recommendations for internal or external audiences
• Audit systems against standards or frameworks, including NIST CSF 2.0, validate controls, and document findings
• Assess the security posture of systems and coordinate implementation with operations teams
• Collaborate with cross-functional teams to troubleshoot controls and maintain secure docs
• Use AI-enabled tools thoughtfully, verify outputs, and apply human judgment

Conocimientos

Cybersecurity experience

Analytical skills

Communication skills

Teamwork

Self-motivated

Herramientas

PowerShell

Microsoft Entra ID

Microsoft Defender

Descripción del empleo

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Security Analyst II

Regular Full-Time Professional Headquarters, Charlottesville, VA, US

Join Our Community

At Crutchfield, our innovative company culture is centered around helping our employees succeed while delivering best-in-class service to our customers. We’re looking for an experienced Security Analyst to join our team based in our Charlottesville location. If you haven’t heard of us, we’re a unique blend of things: an acclaimed, national online retailer, a family-owned business that’s Virginia-based, and a community-oriented group of consumer electronics enthusiasts. In short, we sell fun stuff and love doing it! For the 4th year in a row, we’ve been named as one of Best Places to Work by Virginia Business Magazine and Best Companies Group.

Position Overview:

As a Security Analyst, you will prevent, detect, investigate, and remediate cybersecurity issues and work closely with operational teams to troubleshoot matters involving security technologies. Successful candidates will bring strong communication and interpersonal skills, a genuine interest in information security, and the ability to work effectively with colleagues both within and outside IT. When new or unanticipated situations arise, the analyst is expected to apply sound judgment, conduct self-directed research, review technical documentation, and consult with colleagues to gather the information needed to move the work forward.

As a Security Analyst you will:

• Monitor and manage alerts from security information and event management (SIEM) systems, server and firewall logs, network traffic, endpoint detection and response (EDR) platforms, email security gateways, and secure web gateways
• Review threat intelligence and other written information from trusted email and web sources to stay informed about current cyber threats
• Maintain awareness of evolving threats, technologies, and defensive practices through training and independent research
• Investigate security incidents by collecting and analyzing logs, alerts, and other available evidence
• Identify and implement appropriate measures to contain, mitigate, and remediate security incidents or identified issues
• Follow and help maintain Crutchfield incident response policies, plans, and procedures
• Prepare clear written reports about security threats, incidents, findings, and recommendations for appropriate internal or external audiences
• Audit systems against applicable standards or frameworks, including NIST Cybersecurity Framework 2.0, validate technical controls, and create supporting documentation
• Assess the security posture of systems, recommend changes when needed, and coordinate implementation with the appropriate operational teams
• Collaborate with cross-functional operational teams to troubleshoot security controls, investigate technical issues using documentation and peer expertise, and maintain accurate, reusable security documentation
• Use AI-enabled tools thoughtfully when approved, understand associated risks and benefits, verify outputs, and apply independent human judgment

Qualifications:

• At least two years of experience in a full-time cybersecurity role, or an equivalent combination of cybersecurity certifications and experience in a security-adjacent technical role such as systems or network administration
• Strong technical foundation with demonstrated analytical, troubleshooting, and problem-solving skills
• Working knowledge of information security principles and best practices
• Strong verbal and written communication skills
• Ability to work effectively both independently and as part of a team
• Self-motivation, curiosity, adaptability, and a willingness to learn and share information

Preferred Qualifications:

• Familiarity with Microsoft Entra ID and the Microsoft Defender product suite
• Familiarity with PowerShell or other command-line interfaces
• Experience interpreting PCI DSS, NIST Cybersecurity Framework 2.0, or similar security and compliance frameworks
• Experience reviewing logs, investigating alerts, validating technical controls, or supporting incident response activities

This position follows a hybrid work model, with 3 days onsite each week and the remaining days remote. Candidates should be able to commute to our office regularly and collaborate in person with team members. All remote work must be done within the Commonwealth of Virginia. We are unable to offer sponsorship or relocation assistance for this position.

Salary and Benefits:

The starting salary range for this role is $75,000 - $85,000 depending on skills and experience.

• Two health insurance plans to choose from along with dental and vision insurance plan options.
• Competitive wellness program.
• Tuition reimbursement.
• 401K retirement plan.
• Relaxed dress code.
• Discounts on the fun stuff we sell.

All full-time employees are also offered:

• Short-term disability insurance and long-term disability insurance options, employer-paid life insurance and voluntary life insurance options, including those for spouse and children.
• FSA and HSA options are also available.

Ask us about these benefits in your interview - we're glad to provide details!

Crutchfield is an equal opportunity employer, and we welcome applications from all suitably qualified persons regardless of their race, color, sex, sexual orientation, gender identity, national origin, ethnic origin, religion/belief, disability, veteran status, or age.