Cybersecurity Analyst

About This Role

Identifying, investigating, and neutralizing cyber threats across the enterprise are the core duties of the Cybersecurity Analyst, who serves as Bumble Bee's dedicated point of contact for these efforts. Reporting to the Lead Systems Engineer, this role brings focused ownership to a function currently shared across the IT team. You will investigate and respond to security incidents, hunt for threats before they escalate, and tune detection tooling to reduce noise and close coverage gaps, including building procedures, playbooks, and exercises to maintain business resilience.

Responsibilities

• Further develop and mature the security program: identify, analyze, monitor, and manage security events and incidents, owning the full incident response lifecycle
• Collaborate with IT to prioritize, validate, and track patching and vulnerability remediation
• Collaborate with IT engineers to implement and optimize SIEM platforms, and fine-tune existing threat detection tools to strengthen overall security posture
• Conduct security risk assessments for existing and prospective platforms and vendors, including AI and SaaS solutions
• Perform ongoing account auditing and access control reviews to maintain compliance and reduce risk
• Be involved in the development and review of enterprise IT policies
• Monitor public threat intelligence and vulnerability CVE disclosures to assess business impact and coordinate remediation efforts
• Enhance existing cybersecurity tools to strengthen overall organizational security posture
• Build, update, and maintain incident response playbooks, procedures, and technical documentation
• Collaborate with cross-functional teams to align business operations with acceptable use standards, ensuring organizational goals are met while enabling the secure adoption of AI-driven technologies
• Promote cybersecurity awareness through tabletop exercises, phishing prevention, and ongoing user training initiatives
• Advise on and assess third-party due diligence for security risk to the Bumble Bee environment, including third-party risk assessments, review of contracts for protections, and third-party training where required (e.g., offshore consultants)
• Proven ability to collaborate across business units and influence security best practices
• Other duties as assigned

Requirements

• 4+ years of experience in cybersecurity or information security roles
• Relevant certifications (e.g., ISC2) preferred
• Experience with incident response, threat detection, and log correlation
• Proficiency with SIEM platforms and detection engineering
• Experience with vulnerability management tools (e.g., Tenable, Qualys)
• Working knowledge of Windows and Linux operating systems, command-line tools, and system architecture