Security & Network Analyst II

🔥 1 minute ago

🦌 Connecticut, Florida, +2 more states – Remote

🦌 Connecticut – Remote 🐊 Florida – Remote 🦞 Maine – Remote 🗽 New York – Remote

💵 $74.8k - $125.2k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

The Jackson Laboratory

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1929

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

The Jackson Laboratory is a nonprofit biomedical research organization that develops and distributes genetically defined mouse models, cell and computational resources, and preclinical services to accelerate biomedical discovery and translation to the clinic. It provides research platforms, data-science tools, custom model generation, and training and education programs for scientists, clinicians, and students, and partners with industry and academic groups to enable personalized medicine and drug development. JAX combines laboratory research, core services, and education to bridge mouse and human data and support advances in genetics and disease biology.

📋 Description

• Support security and network operations focused on threat detection, cyber defense, incident response, and enterprise system security and availability. • Monitor, investigate, and resolve alerts from SIEM, EDR/XDR, IDS/IPS, firewall, vulnerability management, identity, cloud security, and network monitoring platforms. • Analyze logs, endpoint telemetry, authentication records, firewall events, DNS activity, proxy logs, packet captures, and network flow data. • Investigate and manage suspicious activity reports, security alerts, vulnerability findings, VPN issues, access requests, connectivity problems, and service interruptions. • Conduct incident response, including event analysis, scoping, evidence collection, documentation, containment support, escalation, and post-incident follow-up. • Troubleshoot DNS, DHCP, routing, switching, firewall policies, VPN connectivity, wireless networks, identity services, endpoints, and application access. • Evaluate false positives, benign activity, policy violations, operational issues, and security incidents requiring escalation or response. • Escalate complex technical issues to Security Engineering, Network Engineering, Infrastructure, or application support teams with documentation and impact assessments. • Identify recurring issues, monitoring gaps, alert quality concerns, and process improvement opportunities. • Support vulnerability management by validating findings, assessing exposure, prioritizing remediation, and tracking resolution. • Assist with firewall rule reviews, VPN troubleshooting, network segmentation validation, access control issues, implementation testing, and post-change monitoring. • Collaborate with engineering, infrastructure, and application teams to improve monitoring, detection capabilities, procedures, and incident response. • Create and maintain investigation notes, knowledge base articles, troubleshooting guides, operational procedures, and incident documentation. • Provide guidance and knowledge sharing to less experienced analysts and contribute to team training. • Participate in security projects, technology implementations, and continuous improvement efforts.

🎯 Requirements

• Bachelor's degree required; Master's degree preferred. A combination of education and experience will be considered in lieu of a degree. • Three or more years of experience in technology, cybersecurity operations, network operations, infrastructure support, incident response, or a closely related technical role. • Intermediate knowledge related to SOC, NOC, security operations, network operations, managed security, enterprise infrastructure, or hybrid security/network operations environments preferred. • Demonstrated ability to work independently on complex tickets, alerts, incidents, and troubleshooting tasks with limited supervision. • Intermediate knowledge of TCP/IP, DNS, DHCP, routing, switching, VPNs, firewalls, proxy services, wireless networking, endpoint security, identity and access management, and common enterprise security controls. • Intermediate experience with several security, network, vulnerability management, monitoring, log analysis, ITSM/ticketing, cloud security, or infrastructure monitoring tools preferred. • Experience analyzing endpoint, identity, network, cloud, and application telemetry to identify anomalous activity, unauthorized access, malware behavior, phishing, credential abuse, lateral movement, vulnerability exploitation, or service degradation. • Ability to perform structured troubleshooting and root-cause analysis across security, network, endpoint, identity, and application layers. • Experience supporting incident response activities, including alert validation, event correlation, impact assessment, containment coordination, evidence collection, timeline development, and post-incident documentation. • Experience reviewing or supporting firewall policies, VPN access, network segmentation, remote access technologies, and secure connectivity workflows preferred. • Understanding of NIST NICE, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, MITRE ATT&CK, or similar frameworks preferred. • Experience supporting hybrid cloud or SaaS environments such as AWS, Azure, Google Cloud, Microsoft 365, Okta, or Entra ID preferred. • Experience with scripting, automation, or query languages such as PowerShell, Python, Bash, KQL, SPL, SQL, SOAR playbooks, or API-based workflows preferred. • Security, network, or cyber defense certifications such as Security+, Network+, CySA+, SSCP, GSEC, CCNA, or equivalent experience preferred. • Ability to manage competing priorities in a high-volume ticket and alert environment. • Strong communication, organizational, troubleshooting, documentation, and collaboration skills. • Desire for continuous education.