Cybersecurity Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $90k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Berkeley Research Group (BRG)

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏗️ Construction

📦 Logistics

🎖️ Defense

💰 Venture Round on 2020-07

Construction • Logistics • Defense

Berkeley Research Group (BRG) is a global consulting firm that helps leading organizations advance in the fields of corporate finance; economics, disputes, and investigations; and performance improvement. With offices around the world, BRG is an integrated group of experts, industry leaders, academics, data scientists, and professionals working across borders and disciplines. The firm specializes in various sectors, including construction, energy, technology, and healthcare, delivering inspired insights and practical strategies to help clients navigate their challenges effectively.

📋 Description

• Monitor, triage, investigate, document, and coordinate response to security alerts, incidents, tickets, and suspicious activity across Microsoft and third-party security platforms • Investigate alerts with BRG’s managed security provider, validate activity, track remediation, and improve alert quality and operational workflows • Administer and support Microsoft security capabilities across Azure, Microsoft Entra ID, Active Directory, Microsoft Defender, Defender for Cloud, Sentinel, and Microsoft Purview within approved role and change-control boundaries • Review Azure security recommendations, policies, and configuration findings; help test, document, and implement Azure Policy initiatives, security baselines, and control exceptions • Support identity security operations, including Conditional Access, privileged access and PIM reviews, role lifecycle activities, stale-account cleanup, authentication controls, service accounts, guest access, and privileged-group monitoring • Support Proofpoint email security, phishing-reporting workflows, Threat Response capabilities, account-takeover protections, security-awareness integrations, and email-policy tuning • Use Tenable Cloud Security and related vulnerability-management capabilities to review cloud exposure, attack paths, asset coverage, security findings, and remediation status • Support Netskope cloud-app and traffic-steering policies, including application discovery, policy testing, AI-application controls, exception handling, and validation of user impact • Assess security risks associated with generative AI and other AI-enabled services; support AI application inventory, usage monitoring, access controls, policy testing, and governance reviews • Investigate email, identity, endpoint, cloud, and application activity using available logs and evidence; escalate confirmed or potentially significant events through the incident-response process • Track vulnerabilities and security recommendations, identify technical owners, validate remediation evidence, document accepted risks or exceptions, and report status to stakeholders • Create and maintain operating procedures, configuration records, support documentation, security metrics, dashboards, and audit/control-review evidence • Participate in change reviews and validate cybersecurity-owned changes include testing, implementation, rollback, communication, and post-change evidence • Evaluate security tools and features, perform structured testing, document findings, and recommend improvements to security controls and operations • Participate in risk assessments, tabletop exercises, incident-response activities, cross-training, and an on-call or escalation rotation as required • Partner with IT Leadership, technical teams, Infrastructure, Network, Service Desk, Risk and Compliance, and external security partners to align technologies, investigate issues, apply controls, and coordinate remediation

🎯 Requirements

• 3+ years of experience in cybersecurity operations, cloud security, identity security, security engineering, or a closely related role • Working knowledge of Microsoft Azure security, Microsoft Entra ID, Active Directory, Azure Policy, Conditional Access, PIM, Defender, Defender for Cloud, Sentinel, and Purview • Experience interpreting and applying security baselines such as Microsoft security baselines and CIS Benchmarks, including testing, exception documentation, and remediation tracking • Hands-on familiarity with email security and phishing-response workflows; Proofpoint experience is strongly preferred • Experience with cloud security posture management or CNAPP capabilities; Tenable Cloud Security experience is preferred • Experience with secure web gateway, cloud access security broker, or SaaS application-control platforms; Netskope policy and traffic-steering experience is preferred • General knowledge of AI security risks, including sensitive-data exposure, unapproved AI services, prompt and response monitoring limitations, application categorization, access control, and governance • Understanding of common identity and authentication concepts, including MFA, passwordless authentication, OAuth, SAML, Kerberos, privileged access, and least privilege • Ability to analyze alerts and logs, distinguish expected administration from suspicious activity, develop a defensible timeline, and clearly document conclusions and follow-up actions • Experience working with a SOC, MDR provider, or other outsourced monitoring partner • Familiarity with Windows, macOS, cloud platforms, enterprise SaaS, and hybrid identity environments • Knowledge of common security and compliance frameworks such as NIST CSF, CIS Controls, SOC 2, ISO 27001/27002, HIPAA, or HITRUST • Relevant security certifications such as Microsoft Certified: Security Operations Analyst Associate (SC-200), CompTIA Security+, CompTIA CySA+, GIAC certifications, or comparable credentials are preferred • Candidate must be able to submit verification of his/her legal right to work in the U.S., without company sponsorship

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume