Cybersecurity Analyst

Role Overview

The Security Analyst plays a critical role in assessing and protecting client security posture across diverse environments. This role combines proactive risk assessment, incident analysis, and customer engagement to identify vulnerabilities, document findings, and guide clients toward stronger security controls. The ideal candidate is detail-oriented, communicates clearly with technical and non-technical stakeholders, and can balance the demands of assessment delivery with rapid escalation support for active security concerns.

Key Responsibilities

• Plan and coordinate security risk assessments with clients, including scheduling, stakeholder alignment, and timeline management

• Conduct comprehensive security assessments, analyzing controls, policies, and configurations against industry frameworks (NIST, ISO 27001, CIS)

• Review and evaluate evidence of control implementation, documenting findings with clarity and supporting documentation

• Identify security risks, control gaps, and areas of non-compliance; articulate business impact and remediation priorities

• Draft detailed assessment reports and executive summaries tailored to client leadership and technical teams

• Conduct kickoff and debrief meetings, explaining assessment methodology, findings, and recommended remediation actions

• Manage customer communication throughout assessment lifecycle, providing status updates and addressing questions

• Handle escalated security cases from the service desk, including incident analysis, root cause investigation, and remediation guidance

• Analyze security incidents and vulnerability findings, documenting technical details and recommended fixes

• Maintain detailed case notes, incident reports, and security documentation for client and internal records

• Collaborate with IT, engineering, and internal security teams to improve assessment quality and service delivery

• Organize client files, policies, and assessment documentation for accurate tracking and reporting

Required Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field (or equivalent professional experience)

• Strong understanding of security controls and risk management frameworks (NIST, ISO 27001, CIS Benchmarks)

• Practical experience conducting or supporting security assessments, audits, or risk evaluations

• Working knowledge of common attack techniques, vulnerabilities, and indicators of compromise

• Excellent written and verbal communication skills; ability to explain technical concepts to non-technical audiences

• Strong organizational and time management abilities; capable of managing multiple assessments and priorities

• Proficiency with Microsoft Office (Word, Excel, Outlook) and ability to quickly learn new tools

• Attention to detail and strong documentation skills

• Ability to work effectively in both independent and collaborative environments

Preferred Qualifications

• 1-3 years of hands-on experience in information security, risk management, IT audit, or related role

• Experience in an MSP or MSSP multi-tenant environment

• Familiarity with GRC (Governance, Risk, and Compliance) tools and platforms

• Experience with vulnerability scanning tools (Qualys, Nessus, Rapid7)

• Basic log analysis or query experience (KQL, SPL, SQL, PowerShell)

• Familiarity with the MITRE ATT&CK framework

• Relevant certifications: CompTIA Security+, CySA+, or CCSK

What Success Looks Like

• Assessments are completed on schedule with clear, actionable findings and evidence

• Clients receive well-organized reports that effectively communicate risk, impact, and remediation priorities

• Escalated security cases are analyzed thoroughly with detailed investigation notes and remediation recommendations

• Customer feedback reflects strong engagement, clarity in assessment communication, and confidence in recommendations

• Assessment quality improves over time through consistent documentation, feedback, and process refinement

• Strong collaboration with SOC, IT, and senior security teams enhances overall MSSP service delivery