Cybersecurity Operations Analyst

What You Will Do and Learn:

The Cybersecurity Operations Analyst will support the Cybersecurity Manager in maintaining and improving Spaulding Ridges security posture. This entry-level role is ideal for someone looking to develop a career in cybersecurity while gaining hands-on experience across security operations, vulnerability management, identity and access management, cloud security, and compliance.

The analyst will assist in monitoring security events, responding to security alerts, supporting security projects, and maintaining security documentation while learning from senior members of the Technology & Security team.

Security Operations

• Monitor and analyze security alerts from SIEM, EDR, Firewall, WAF, IDS/IPS, email security, and cloud security platforms.
• Conduct and Support threat hunting and detection of tuning activities.
• Monitors open-source and proprietary threat intelligence feeds daily to research threat actor tactics, techniques, and procedures (TTPs).
• Support the investigation and triage of security alerts and incidents under the guidance of the Cybersecurity Manager.
• Assist with incident response activities, including documentation, evidence collection, and follow-up actions.
• Help maintain security playbooks and operational procedures.

Vulnerability Management

• Assist with vulnerability scanning across endpoints, servers, and cloud environments.
• Track remediation activities and follow up with system owners.
• Help prepare vulnerability reports and dashboards.
• Support penetration testing and remediation validation.

Identity & Access Management

• Support user provisioning, deprovisioning, and access reviews.
• Assist with periodic access recertification activities.
• Help maintain least-privilege and role-based access controls.
•  Support MFA, Conditional Access, SSO, and Privileged Access Management.

Cloud & Infrastructure Security

• Assist with security reviews of Microsoft 365, Azure, and other cloud platforms.
• Support implementation of security best practices and configuration reviews.
• Help monitor cloud security recommendations and remediation activities.
• Monitor Azure, Microsoft 365, AWS, and SaaS platform security posture and Assist with Zero Trust security initiatives.

Security Governance & Compliance

• Support ISO 27001 activities, including policy reviews, evidence collection, internal audits, and corrective actions.
• Assist with third-party security assessments and vendor reviews.
• Help maintain security documentation and records. 

Security Awareness

• Support security awareness campaigns and phishing simulations.
• Assist in developing security communications and training materials.
• Help answer security-related questions from employees.

Security Tool Administration

• Assist with the administration, maintenance, and integration of security tools.
• Support security monitoring improvements and automation initiatives.
• Help troubleshoot issues related to security technologies.

Education and Work Experience Requirements:

• Bachelors degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience).
• 1-2 years of experience in cybersecurity, systems administration, cloud administration, or related technical roles.
• Good to have: Knowledge of security frameworks and best practices, including ISO 27001, NIST Cybersecurity Framework (CSF), and CIS Controls.
• One or more of the following certifications are preferred: Microsoft SC-900: Security, Compliance, and Identity Fundamentals, CompTIA Security+, eJPT (eLearnSecurity Junior Penetration Tester)
• Strong analytical and problem-solving skills.
• Basic understanding of: Microsoft 365, Azure fundamentals, Networking concepts, Active Directory / Entra ID, SIEM and EDR concepts, Vulnerability management, MFA and Identity & Access Management, Windows administration, Information security principles.
• Strong willingness to learn and develop technical skills.
• Analytical mindset and attention to detail.
• Good communication and documentation skills.
• Ability to manage multiple tasks and priorities.