This Cybersecurity Analyst role involves protecting the firm's systems, networks, applications, and confidential information. The person in this role monitors security tools, investigates alerts, supports incident response, and assists the CIO with client security questionnaires.
Responsibilities
Implement, operate, and document security controls under approved firm policies, standards, procedures, and change-management requirements
Monitor security alerts, logs, dashboards, and managed security service notifications; triage events, document findings, and escalate issues under established procedures
Support incident response through evidence collection, investigation, containment, user coordination, documentation, and remediation tracking
Run or coordinate vulnerability scans, validate findings, assign remediation tasks, and track corrective actions through closure
Work with the infrastructure and applications teams to maintain endpoint, network, cloud, identity, email, web, and data-protection controls
Assist with security tools for endpoint detection and response, event monitoring, email protection, multifactor authentication, mobile device management, and data loss prevention
Support user and privileged access reviews, joiner-mover-leaver controls, and investigation of unusual sign-in activity
Complete client and prospective-client security questionnaires by gathering current information and coordinating accurate, consistent, and timely responses
Maintain an organized library of approved questionnaire responses, control descriptions, supporting evidence, policies, certifications, and other due-diligence materials
Track findings from audits, tests, assessments, client reviews, and incidents, and follow up with assigned owners until completion
Support third-party security reviews by collecting questionnaires, reviewing available documentation, recording findings, and escalating concerns
Assist with phishing simulations, security awareness communications, user training, and follow-up coaching for employees who need additional guidance
Maintain operating procedures, system records, incident notes, knowledge base articles, metrics, and other security documentation
Stay current on relevant threats, vulnerabilities, product updates, and other law-firm security concerns
Perform other assigned security duties
Requirements
Associate's or Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience
Minimum of 2 years of information security, cybersecurity, or security-focused information technology experience supporting a law firm
Hands-on experience with Microsoft 365 security and technologies such as Entra ID, Intune, Defender, Azure, or comparable platforms
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Working knowledge of network, identity, endpoint, and email security; vulnerability management; patching; encryption; and backup protection
Experience completing client security questionnaires, collecting audit evidence, maintaining control documentation, or supporting security and compliance reviews
Familiarity with the NIST Cybersecurity Framework, CIS Controls, ISO 27001, SOC 2, or comparable security requirements
Ability to investigate alerts using logs, endpoint detection and response tools, event monitoring systems, vulnerability scanners, or managed security providers
Strong attention to detail, documentation, written communication, organization, and follow-through, with the ability to manage multiple assigned tasks and deadlines
Sound judgment, discretion, and a service-oriented approach when handling confidential information
Nice to have:
Security+, SSCP, or a comparable certification
Important Details
Work location: Hybrid or Remote
Travel: Up to 10% domestic travel by ground and/or air, dependent on firm needs
Physical Requirements
Primarily sedentary work
Exerting up to 40 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects
Repetitive motion
Substantial movements (motions) of the wrists, hands, and/or fingers
Close visual acuity to perform an activity such as preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading
Ability to operate standard office equipment and keyboards
Ability to walk short distances, and/or drive a vehicle to deliver and pick up materials
