Security Operations Analyst: Incident Response & Monitoring

Jacklinksproteinsnacks; Minneapolis (MN); On-site; USD 70,000 - 110,000; Full time

Job summary

Link Snacks seeking a Cybersecurity Operations Analyst to monitor, triage, investigate, and respond to security alerts across distributed environments. The role requires hands-on incident response, vulnerability management, and collaboration with IT, security providers, and end users to strengthen the organization's security posture.

The ideal candidate has 2+ years in cybersecurity operations, experience with Microsoft Defender/Sentinel and AD/Entra ID, and a solid ability to analyze logs and

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or related field or equivalent experience.
• 2+ years of hands-on cybersecurity operations experience.
• Strong foundation in alert triage, incident response, and vulnerability remediation support.
• Experience with ticketing systems, security consoles, endpoint tools, identity platforms, and scripting or query basics.
• Proficiency with Defender, Sentinel, M365 security tools, AD, Entra ID, and Nessus or similar security tech.
• Ability to analyze logs, alerts, indicators of compromise, and endpoint telemetry to support timely decisions.
• Proven ability to investigate alerts, document findings, and coordinate incident response.
• Knowledge of vulnerability management, endpoint security, phishing response, access control, and security technologies.
• Ability to manage cybersecurity tickets and coordinate remediation across teams.
• Familiarity with ISO 27001, NIST, SOC2 and vendor coordination during investigations.

Responsibilities

• Monitor, triage, investigate, and respond to cybersecurity alerts from SIEM, EDR, MDR, cloud security, and more.
• Support and maintain MDR, EDR, AV, and security tooling across cloud, endpoint, and network environments.
• Perform incident response activities including gathering evidence, scoping, containment, remediation tracking, and follow-up.
• Create security incident reports and present impacts, actions, remediation status, and lessons learned to stakeholders.
• Optimize SIEM log ingestion and data sources to reduce noise and improve visibility.
• Support vulnerability management by validating findings and coordinating remediation with IT and OT teams.
• Respond to security-related helpdesk tickets such as phishing, endpoint concerns, access questions, and secure configuration guidance.
• Coordinate with MSPs, internal teams, vendors, and stakeholders to resolve security events promptly.
• Assist third-party risk management with reviewing vendor security data and remediation tracking.
• Provide user education on phishing, secure access, and safe technology use.
• Other duties as assigned.

Skills

Cybersecurity operations

Incident investigation

Log analysis

Ticket management

Compliance standards

Vendor coordination

Encryption basics

Security incident response

Phishing analysis

Education

Bachelor's degree

Tools

Microsoft Defender

Microsoft Sentinel

Microsoft 365 security tools

Active Directory

Entra ID

Phosphorus

Tenable Nessus

Job description

Link Snacks seeking a Cybersecurity Operations Analyst to monitor, triage, investigate, and respond to security alerts across distributed environments. The role requires hands-on incident response, vulnerability management, and collaboration with IT, security providers, and end users to strengthen the organization's security posture.

The ideal candidate has 2+ years in cybersecurity operations, experience with Microsoft Defender/Sentinel and AD/Entra ID, and a solid ability to analyze logs and