Cybersecurity Analyst

We are seeking a highly skilled Cybersecurity Analyst to lead and mature our organization’s security posture with a strong emphasis on the Microsoft Security ecosystem
, user security awareness, disaster recovery, vulnerability management, patch management and security documentation. This role prioritizes threat prevention, detection, identity protection, endpoint security, compliance alignment, and continuous employee education. Infrastructure responsibilities exist only as needed to support security objectives.

The ideal candidate will serve as the organization’s security owner, driving policy, tooling optimization, user education, and incident readiness while partnering closely with IT operations and leadership.

• Implement, configure, tune, and maintain the Microsoft Security Stack, including:
  • Microsoft Defender for Endpoint, Office 365, Identity, and Cloud Apps
  • Microsoft Sentinel (SIEM/SOAR) – log ingestion, analytics rules, workbooks, and automation
  • Microsoft Purview – Data Loss Prevention (DLP), information protection, and retention
  • Microsoft Entra  (Azure AD) – identity protection, conditional access, and Privileged Identity Management (PIM)
  • Intune / Endpoint Security Policies – device compliance, attack surface reduction, and application control
• Develop and maintain Zero Trust security architecture across identity, device, network, and application layers.
• Work closely with the SOC to monitor security telemetry, investigate alerts, perform root‑cause analysis, and lead incident response activities.
• Execute internal security‑related IT and operational projects while also participating as a project team member on broader organizational projects.
• Maintain automated security workflows using Sentinel playbooks, Power Automate, and scripting where appropriate.
• Conduct vulnerability management activities, penetration testing, security posture reviews, and continuous improvement initiatives.
• Partner with IT and business teams to embed security into new projects, cloud workloads, and application deployments.
• Evaluate third‑party vendor risk related to cybersecurity.
• Maintain security baselines aligned with CIS, NIST, and Microsoft best practices.
• Collaborate with team members and stakeholders on solutions and designs that align with best practices.

• Administer the KnowBe4 Security Awareness platform
  , including:
  • Phishing campaigns
  • Training assignments
  • Executive and compliance reporting
• Analyze user behavior trends and continuously improve training effectiveness.
• Maintain and enhance end‑user security knowledge documentation
  , including:
  • Phishing identification and reporting
  • Password and MFA best practices
  • Data handling and privacy guidelines
  • Device security expectations
• Create easy‑to‑consume knowledge base articles, quick‑reference guides, and internal security bulletins.
• Conduct internal security awareness campaigns and tabletop exercises.

• Assist with the creation, review, and enforcement of security policies, including acceptable use, access control, data protection, and incident response.
• Support audits and assessments against frameworks such as:
  • NIST CSF / 800‑53
  • CIS Controls
  • HIPAA / healthcare security alignment
• Maintain evidence, reporting, and metrics for leadership visibility.
• Track remediation of security findings and risks.

• Provide limited infrastructure support strictly related to security enablement, visibility, and risk reduction.
• Support secure network segmentation, firewall policy review, and secure cloud connectivity.
• Assist with escalated incidents where security and infrastructure intersect.
• Collaborate with the Infrastructure team on disaster recovery and business continuity initiatives.

• 5+ years of experience in enterprise cybersecurity operations and security monitoring environments.
• Strong hands‑on experience with the Microsoft Security ecosystem
  :
  • Sentinel
  • Purview
• Experience managing endpoint security and identity security at scale.
• Demonstrated experience running security awareness programs (KnowBe4 preferred).
• Ability to write…