About This Role
This individual contributor role is for a hands-on Cybersecurity Analyst to support day-to-day security operations in a hybrid cloud and on-premise environment. The analyst will work on threat detection, incident response, vulnerability management, and compliance execution, focusing on closing security gaps and providing insights for data protection and compliance decisions. The role offers opportunities for growth and development within the information security field.
Responsibilities
- Monitor and triage alerts across SIEM, EDR, and cloud security tooling, escalating and driving incidents through to resolution
- Own vulnerability management, including scanning, prioritization (based on CVSS, exploitability, and asset criticality), and remediation tracking
- Support identity and access reviews, focusing on least privilege, access recertification, and Zero Trust posture improvements
- Maintain and tune detection content aligned to MITRE ATT&CK, reducing false-positive noise over time
- Assist with control implementation and evidence collection for frameworks in scope (e.g., SOC 2, ISO 27001, NIST CSF/800-53)
- Participate in incident response, including evidence and log analysis, containment actions, and post-incident documentation
- Help maintain security policy and technical documentation, mapped to relevant controls
- Work across both on-premise and cloud infrastructure
Requirements
- 1-2 years of experience in a security operations, IT security, or systems administration role with security responsibilities
- Working knowledge of at least one SIEM platform (e.g., Splunk, Sentinel, Elastic, or LogRhythm) and one EDR platform
- Comfortable working in both Linux and Windows environments
- Familiarity with IAM concepts, network fundamentals (firewalls, segmentation, VPN), and cloud security basics
- Exposure to at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, HIPAA, or NIST); understanding of what "evidence" means in this context
Nice to have:
- Scripting ability in Python, PowerShell, or Bash
- Relevant certifications such as Security+, GCIH, GSEC, CySA+, or a cloud security certification
Benefits
- Direct mentorship, with a fast path to broader ownership (architecture, incident response lead, compliance lead)
- A small team where work is visible and valued
- Special rates for staff members across the entire Domes Resorts portfolio
- Modern, hybrid working environment (cloud and on-prem exposure, flexibility where applicable)
- Employee wellbeing initiatives and team-building activities
About the Company
At the Domes Resorts, as the company expands with new Resort openings on an almost annual basis, its main goal is to create a unique environment for both guests and people.
