Cyber Security Analyst

Hansen Talent Group has a unique opportunity for a Cyber Security Analyst to join a fast-paced Security Operations team responsible for monitoring, detecting, investigating, and responding to security threats across a large enterprise environment. This hybrid role supports critical cybersecurity operations, security engineering initiatives, and threat detection efforts across cloud, endpoint, network, and server technologies.

The Cyber Security Analyst will be responsible for daily monitoring and investigation of security events, incident response activities, threat analysis, vulnerability assessments, and security tool optimization. This individual will work closely with senior security staff to identify emerging threats, improve detection capabilities, and strengthen the organization's overall security posture.

Duties:

• Perform daily monitoring, triage, and investigation of security alerts generated from SIEM, EDR, cloud, email, and network security platforms.
• Conduct incident response activities, including analysis, containment, remediation, and documentation of security events.
• Review event logs and security telemetry to determine root cause, assess risk, and establish appropriate response actions.
• Perform security assessments, vulnerability scanning, and penetration testing activities to identify and mitigate security risks.
• Analyze cyber threats, vulnerabilities, and threat intelligence to identify potential risks to the enterprise.
• Tune and optimize security tools to improve detection capabilities and reduce false positives.
• Support the design, implementation, and enhancement of enterprise security architectures and security technologies.
• Evaluate and recommend security processes, procedures, and controls for the prevention, detection, containment, and remediation of security incidents.
• Research emerging threats, attack techniques, and security technologies to improve organizational security readiness.
• Collaborate with infrastructure, network, cloud, and application teams to address security concerns and strengthen defenses.
• Develop reports and recommendations regarding security risks, incidents, and remediation efforts for technical and business stakeholders.

Qualifications:

• Strong experience with security operations, incident response, and threat detection in an enterprise environment.
• Experience working with SIEM platforms, endpoint detection and response (EDR), and security monitoring technologies.
• Strong understanding of system security, network security, intrusion detection, log analysis, and incident management practices.
• Experience investigating security events and analyzing network-based and host-based attacks.
• Knowledge of vulnerability management, risk assessment, business continuity, and security architecture concepts.
• Experience tuning security tools and leveraging threat intelligence to improve detection capabilities.
• Strong troubleshooting, root cause analysis, and problem-solving skills.
• Ability to work effectively in a fast-paced environment and manage multiple priorities.
• Strong written and verbal communication skills with the ability to collaborate across technical and business teams.
• Experience supporting multi-vendor security environments.

Preferred Qualifications:

• Experience interpreting and acting on cyber threat intelligence.
• Strong incident response experience within a medium to large enterprise environment.
• Experience with CrowdStrike, Microsoft 365 Security, Azure Security, Windows and Linux server environments.
• Familiarity with ExtraHop, Proofpoint, Palo Alto, Cisco, and Elastic technologies.
• Security certifications such as CISSP, CISM, or CISA.