Senior Cybersecurity Analyst

Machine Learning Technologies, LLC; Minneapolis (MN); Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

Machine Learning Technologies, LLC seeks a Cybersecurity Analyst to strengthen its security operations and data protection initiatives. You will investigate incidents, monitor events, and collaborate with stakeholders to improve controls across cloud, endpoint, identity, and network environments.

The role emphasizes threat detection, incident response, and reducing false positives while supporting risk assessments, vendor evaluations, and regulatory compliance. On-call rotation applies.

Qualifications

• 8+ years of cybersecurity experience across security operations, incident response, and governance.
• Hands-on with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying KQL queries for investigations and detection.
• Knowledge of NIST, CIS Controls or similar frameworks; cloud/endpoint security experience.

Responsabilités

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application and network environments.
• Monitor and triage security events in a SIEM, including threat analysis and incident escalation.
• Develop KQL queries for investigations, reporting, threat hunting and detection tuning.
• Support incident response activities including containment, remediation, recovery and post-incident reviews.
• Enhance detection coverage by reducing false positives and identifying gaps.
• Assist with data protection initiatives including DLP, information protection, insider risk monitoring and eDiscovery.
• Participate in risk assessments, control reviews, vendor evaluations and compliance initiatives.
• Create and maintain security procedures, runbooks, metrics and technical documentation.
• Collaborate with stakeholders to communicate risks, findings and improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Connaissances

SIEM experience (Microsoft Sentinel)

KQL queries

Security frameworks

Endpoint/Identity/Email security

Cloud security technologies

DLP / data protection

Stakeholder communication

Certifications

Microsoft 365 security

Outils

Microsoft Sentinel

Description du poste

Job Summary

A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives. This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture.

Position Overview

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
• Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
• Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
• Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
• Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
• Create and maintain security procedures, runbooks, metrics, and technical documentation.
• Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Requirements

• 8+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying Kusto Query Language (KQL) queries.
• Knowledge of security frameworks such as NIST, CIS Controls, or similar industry standards.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
• Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
• Strong analytical, troubleshooting, and investigative skills.
• Ability to effectively communicate with both technical and non-technical stakeholders.
• Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
• Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent are preferred.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.