Senior Cybersecurity Analyst

Robotic Process Automation LLC; Minneapolis (MN); On-site; USD 110,000 - 160,000; Full time

Job summary

Robotic Technologies Automation in Minneapolis is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives.

You will investigate threats, develop detection capabilities, and collaborate with stakeholders to strengthen security posture, including on-call rotation.

Qualifications

• 8+ years of experience in cybersecurity, security operations, or compliance.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Experience with KQL queries for investigations and detection tuning.
• Knowledge of security frameworks such as NIST, CIS Controls, or similar standards.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
• Familiarity with data protection technologies including DLP, information classification, and audit monitoring.

Responsibilities

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
• Monitor and triage security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
• Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
• Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
• Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
• Create and maintain security procedures, runbooks, metrics, and technical documentation.
• Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Skills

KQL queries

Incident response

Threat detection

Security governance

Stakeholder communication

Cloud security

Analytical thinking

MS 365 security

Tools

Microsoft Sentinel

Job description

Job Summary

A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives. This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture.

Position Overview

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
• Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
• Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
• Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
• Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
• Create and maintain security procedures, runbooks, metrics, and technical documentation.
• Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Requirements

• 8+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying Kusto Query Language (KQL) queries.
• Knowledge of security frameworks such as NIST, CIS Controls, or similar industry standards.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
• Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
• Strong analytical, troubleshooting, and investigative skills.
• Ability to effectively communicate with both technical and non-technical stakeholders.
• Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
• Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent are preferred.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.