Cyber Security Analyst

Job Description:

Job Title:             Cyber Security Analyst

Location :            Baltimore, MD (Hybrid - 3 days/week at office)

Type:                    Contract

*** Holiday and weekend shifts are mandatory

Job Description: 

We are seeking a Cyber Security Analyst to support a global cybersecurity function that provides continuous 24/7 security incident monitoring and response. This role will help address a critical staffing gap in North American weekend and holiday coverage, ensuring consistent incident response capabilities and minimizing potential security risks.

The selected candidate will support the identification, assessment, investigation, escalation, and containment of cybersecurity incidents to help protect enterprise systems, infrastructure, applications, and sensitive information. This position is part of a business-critical security function where timely incident detection and response are essential to reducing operational risk and supporting regulatory obligations.

Key Responsibilities

• Support 24/7 cybersecurity incident response operations, with a primary focus on North American weekend and holiday shifts.
• Monitor security alerts and investigate potential cybersecurity incidents to determine their severity, scope, and potential business impact.
• Analyze security events and available evidence to identify suspicious activities, potential threats, and indicators of compromise.
• Perform incident triage, prioritization, escalation, and coordination with relevant cybersecurity and technology teams.
• Assist with incident containment, remediation, and recovery activities in accordance with established incident response procedures.
• Document investigation findings, incident timelines, response actions, and recommendations accurately and promptly.
• Coordinate with global security operations and incident response teams to ensure effective handoffs across shifts and geographic regions.
• Communicate incident status, escalation requirements, and response progress to relevant stakeholders.
• Follow established security policies, incident response playbooks, and escalation procedures to ensure consistent handling of security events.
• Identify recurring incident patterns, process gaps, and opportunities to improve incident response readiness.

Required Qualifications

• Experience in cybersecurity, security operations, incident response, or a related information security function.
• Understanding of cybersecurity incident detection, investigation, triage, escalation, and response processes.
• Ability to analyze security alerts, investigate suspicious activities, and assess potential threats.
• Familiarity with security operations workflows, incident documentation, and escalation procedures.
• Strong analytical, troubleshooting, communication, and problem-solving skills.
• Ability to work independently during assigned shifts while collaborating effectively with geographically distributed teams.
• Availability to work scheduled North American weekend and holiday shifts as part of a 24/7 security operations function.
• Strong attention to detail and the ability to prioritize multiple security events in a time-sensitive environment.

Preferred Qualifications

• Experience supporting a Security Operations Center (SOC), Cyber Incident Response Team, or Computer Security Incident Response Team.
• Familiarity with SIEM, EDR/XDR, threat intelligence, and security monitoring platforms.
• Knowledge of incident response frameworks, threat investigation methodologies, and security incident handling best practices.
• Exposure to digital forensics, malware investigation, threat hunting, or incident root-cause analysis.
• Relevant cybersecurity certifications, such as Security+, CySA+, GCIH, or equivalent qualifications.