Cybersecurity Analyst

About This Role

This role is for a skilled and motivated Cybersecurity Analyst to join a growing cybersecurity team. The ideal candidate will have a strong foundation in cybersecurity operations, network security, threat detection, incident response, and vulnerability management. This position requires a proactive, analytical individual who can identify, investigate, and respond to cybersecurity threats while helping protect clients' critical IT and Operational Technology (OT) environments. As a Cybersecurity Analyst, you will play an integral role in the Cyber Fusion Center (CFC) supporting the continuous monitoring, detection, analysis, and mitigation of cyber threats across diverse customer environments.

Responsibilities

• Monitor, analyze, and investigate cybersecurity alerts and events generated by SIEM, EDR, NDR, firewalls, intrusion detection systems, and other security platforms
• Support FrontLine Cyber Solutions' 24/7/365 Cyber Fusion Center operations, identifying and responding to potential security incidents across customer environments
• Perform initial triage, investigation, escalation, and remediation of cybersecurity incidents according to established incident response procedures
• Conduct threat hunting activities to identify suspicious behavior, malicious activity, indicators of compromise (IOCs), and potential security breaches
• Analyze network traffic, security logs, endpoint telemetry, and packet captures (PCAP) to identify anomalous or malicious activities
• Configure, maintain, and optimize SIEM platforms, including alerting rules, correlation logic, dashboards, and reporting capabilities
• Deploy, configure, and manage EDR and NDR solutions to provide comprehensive endpoint and network visibility
• Assist with the deployment, configuration, monitoring, and troubleshooting of FrontLine Cyber Solutions' Watcher Security Appliance and associated cybersecurity technologies
• Conduct vulnerability assessments using industry-standard scanning and assessment tools to identify weaknesses in customer systems and networks
• Analyze vulnerability scan results, prioritize identified risks, and develop actionable remediation recommendations
• Assist with penetration testing, security assessments, and validation of cybersecurity controls
• Investigate potential phishing attacks, malicious emails, malware infections, unauthorized access attempts, and suspicious network communications
• Monitor threat intelligence sources, including emerging vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and indicators of compromise
• Support cybersecurity incident response activities, including containment, eradication, recovery, root cause analysis, and post-incident reporting
• Review and analyze firewall configurations, access control policies, network segmentation, and security architecture
• Assist with security hardening of Windows, Linux, Windows Server, Microsoft 365, and Active Directory environments
• Evaluate endpoint security configurations, antivirus solutions, application controls, and security policies
• Document security incidents, investigation findings, vulnerabilities, remediation activities, and technical procedures
• Develop and maintain incident response playbooks, standard operating procedures (SOPs), and cybersecurity monitoring documentation
• Prepare detailed security reports, incident summaries, and recommendations for internal teams and customers
• Collaborate with FrontLine's Technical Operations Center (TOC), cybersecurity engineers, and customer IT personnel to resolve security issues
• Participate in cybersecurity research, detection engineering, and continuous improvement of security monitoring capabilities
• Support the integration of cybersecurity tools, threat intelligence feeds, and automated response capabilities
• Participate in an on-call rotation and provide after-hours support for cybersecurity incidents when required

Requirements

• Previous experience as a Cybersecurity Analyst, SOC Analyst, Security Engineer, Network Security Analyst, or similar cybersecurity position is preferred
• Strong understanding of cybersecurity principles, security operations, incident response, and threat detection methodologies
• Experience working with SIEM platforms such as Microsoft Sentinel, Splunk, RocketCyber, or similar technologies
• Familiarity with EDR and endpoint security solutions such as CrowdStrike, Microsoft Defender for Endpoint, WatchGuard EDR, or similar platforms
• Understanding of Network Detection and Response (NDR), Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS)
• Strong knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, HTTP/HTTPS, VPNs, VLANs, routing, switching, and network segmentation
• Experience analyzing network traffic using Wireshark, tcpdump, or similar packet analysis tools
• Understanding of firewalls, access control lists (ACLs), VPN technologies, and network security architecture
• Experience with Windows, Windows Server, and Linux operating systems
• Familiarity with Microsoft 365 security administration, Microsoft Entra ID, Active Directory, Group Policy, and identity and access management
• Understanding of authentication protocols, multifactor authentication (MFA), conditional access, and privileged access management
• Experience investigating malware, phishing attacks, suspicious network activity, and unauthorized access attempts
• Knowledge of vulnerability scanning tools such as Nessus, OpenVAS, Qualys, or similar technologies
• Familiarity with penetration testing and security assessment tools such as Nmap, Kali Linux, Metasploit, and Burp Suite
• Understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and common attacker tactics, techniques, and procedures
• Familiarity with incident response processes, forensic evidence collection, and root cause analysis
• Understanding of security logging, event correlation, alert tuning, and detection engineering
• Experience working with security automation, scripting, or programming languages such as Python, PowerShell, or Bash is beneficial
• Familiarity with cloud security technologies, particularly Microsoft Azure and Microsoft 365 environments
• Experience with security ticketing systems, incident tracking, and technical documentation
• Strong analytical and problem-solving skills with the ability to investigate complex cybersecurity incidents
• Ability to communicate technical findings and cybersecurity risks clearly to both technical and nontechnical audiences
• Strong organizational skills with the ability to manage multiple investigations and priorities simultaneously
• Ability to work independently while contributing effectively to a collaborative cybersecurity operations team

Nice to have:

• CompTIA Security+, CySA+, Network+, or equivalent cybersecurity certifications
• Experience working in a Security Operations Center (SOC), Managed Security Service Provider (MSSP), or Managed Service Provider (MSP) environment
• Experience supporting cybersecurity operations for multiple customers across different industries
• Familiarity with Operational Technology (OT), Industrial Control Systems (ICS), SCADA environments, and industrial networking protocols is a plus
• Prior military experience in cybersecurity, intelligence, communications, or information technology is valued
• Experience developing security detections, threat hunting queries, and incident response automation is beneficial
• Familiarity with artificial intelligence and machine learning applications in cybersecurity is a plus

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Tuition reimbursement
• Vision insurance

Important Details

• Shift availability: Overnight Shift (Required)

About the Company

At FrontLine Cyber Solutions, cybersecurity is not simply another IT service; it is our mission. The team works at the forefront of cybersecurity operations, protecting organizations and critical infrastructure against increasingly sophisticated cyber threats. As a member of the cybersecurity team, you will have the opportunity to work directly with experienced cybersecurity professionals, participate in real-world incident response operations, and gain hands-on experience with advanced security technologies. This role provides exposure to a broad range of cybersecurity disciplines, including threat hunting, incident response, network defense, vulnerability management, penetration testing, and cybersecurity research. You will also have opportunities to work with FrontLine's proprietary Watcher Security Appliance, its Cyber Fusion Center, and emerging cybersecurity technologies designed to protect both traditional IT networks and complex Operational Technology environments. The company values individuals who take initiative, think critically, continuously improve their technical skills, and genuinely care about protecting customers.