Senior Cybersecurity Analyst

Ethereum Technologies; Minneapolis (MN); On-site; USD 110,000 - 170,000; Full time

Job summary

Ethereum Technologies in Minneapolis seeks a seasoned Cybersecurity Analyst to strengthen security operations, threat detection, and incident response. You will investigate threats across cloud, endpoints, and networks, while developing robust KQL-based detections and running security control improvements.

The role emphasizes collaboration with stakeholders, DLP and data protection efforts, and contributing to risk assessments and compliance initiatives.

Qualifications

• 8+ years of cybersecurity experience including security operations and incident response.
• Hands-on with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying KQL queries.
• Knowledge of NIST, CIS Controls, or similar frameworks.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security.
• Familiarity with DLP, information classification, and audit monitoring.
• Strong analytical and investigative skills; able to communicate with technical and non-technical stakeholders.
• Certifications such as Security+, CySA+, SC-200/SC-300, CISSP preferred.

Responsibilities

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, applications, and network environments.
• Monitor and triage security events in a SIEM; analyze threats and escalate incidents.
• Develop and use KQL queries for investigations and detection tuning.
• Assist with containment, remediation, recovery, and post-incident reviews.
• Reduce false positives and improve detection coverage.
• Support data protection activities including DLP investigations and auditing.
• Participate in risk assessments, control reviews, and vendor evaluations.
• Create runbooks, metrics, and security documentation.
• Collaborate with stakeholders to communicate risks and improvements.
• Participate in on-call rotation for critical incidents.

Skills

SIEM experience

KQL queries

Security frameworks

Cloud security

Communication

8+ years experience

Tools

Microsoft Sentinel

KQL

Microsoft 365 security

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Summary

A growing organization is seeking a Cybersecurity Analyst to support and enhance its cybersecurity operations, threat detection, incident response, and data protection initiatives. This role is ideal for a security professional who enjoys investigating threats, improving security controls, and partnering with stakeholders to strengthen overall security posture.

Position Overview

• Investigate and respond to cybersecurity incidents across cloud, endpoint, identity, email, application, and network environments.
• Monitor and maintain security events within a SIEM environment, including alert triage, threat analysis, and incident escalation.
• Develop and leverage KQL queries for investigations, reporting, threat hunting, and detection tuning.
• Support incident response activities including containment, remediation, recovery, and post-incident reviews.
• Enhance security monitoring capabilities by reducing false positives, identifying gaps, and improving detection coverage.
• Assist with data protection initiatives including DLP investigations, information protection, insider risk monitoring, auditing, and eDiscovery activities.
• Participate in security risk assessments, control reviews, vendor evaluations, and compliance-related initiatives.
• Create and maintain security procedures, runbooks, metrics, and technical documentation.
• Collaborate with stakeholders across the business to communicate risks, findings, and recommended security improvements.
• Participate in an on-call rotation supporting critical cybersecurity incidents.

Requirements

• 8+ years of experience in cybersecurity, security operations, incident response, threat detection, governance, risk, or compliance.
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel.
• Experience writing and modifying Kusto Query Language (KQL) queries.
• Knowledge of security frameworks such as NIST, CIS Controls, or similar industry standards.
• Experience with endpoint protection, identity security, email security, vulnerability management, and cloud security technologies.
• Familiarity with data protection technologies including DLP, information classification, and audit monitoring.
• Strong analytical, troubleshooting, and investigative skills.
• Ability to effectively communicate with both technical and non-technical stakeholders.
• Experience with Microsoft 365 security technologies and cloud-based security operations preferred.
• Relevant certifications such as Security+, CySA+, SC-200, SC-300, CISSP, or equivalent are preferred.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.