Security Analyst

Job Title: Security Analyst

Location: National Harbor, MD (Hybrid)

Type: Full Time

Compensation: $60,000 to $80,000 DOE, Annually

Please note - applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

Cloudforce's security team is growing, andwe'rehiring a Security Analyst to assist in making sure the day-to-day security tasks are handled. You'll report to our Security Engineer and take ownership of the real, hands-on work. Monitoring alerts, digging into suspicious activity, investigating through log inspection, jumping in on incident response, and running assignments all the way to the finish line. This is a hands-on role, not a “watch and learn” gig.

You’ll also work closely with the broader IT team on endpoint management, tackling enterprise tasks involving MDM, device compliance, configuration baselines, and conditional access. All the things that ensure security is woven into how we manage devices, identities, and infrastructure across the organization. You’ll be the one helping make that a reality.

What we’re really after is someone with a solid IT background who’s ready to dive deep into all things security. You’ll be working across our Microsoft 365 and cloud environment, maintaining tight security controls, ensuring documentation remains sharp, and will have a hand in improving processes along the way. Not to mention, as the team grows, your role grows with it.

So, if you’re looking for a ground‑floor opportunity to build a real security career with people who are genuinely invested in your development, this is it.

• Monitor security systems and networks for threats, vulnerabilities, and suspicious activity.
• Investigate security incidents and breaches, documenting findings and response actions.
• Assist with vulnerability assessments and support penetration testing efforts.
• Analyze security logs, alerts, and reports from various security tools.
• Respond to and remediate security incidents following established procedures.
• Assist with implementing and maintaining security controls and technologies.
• Manage and maintain endpoint management and mobile device management (MDM) platforms, including device compliance policies and secure configuration baselines.
• Support the configuration and enforcement of conditional access policies and identity‑related security controls.
• Develop and update security policies, procedures, and documentation.
• Stay current on common attack techniques and defensive best practices.

• At least two years of experience in IT, helpdesk, networking, systems administration, or security.
• Experience with ticketing and service management platforms.
• Working knowledge of Microsoft fundamentals: cloud productivity and collaboration suite security basics, desktop and server operating system fundamentals (event logs, services, permissions) & cloud identity and access management concepts (users/groups, roles, MFA, conditional access).
• Familiarity with security concepts: phishing, malware, credential theft, MFA fatigue, least privilege, patching, and basic incident handling.
• Familiarity with log analysis and troubleshooting; ability to follow documented procedures.
• Strong written communication and documentation skills (clear incident notes and summaries).
• Ability to work calmly under pressure and prioritize multiple alerts/tasks.
• Familiarity with vulnerability scanning tools or concepts (e.g. Nessus, Qualys, Defender Vulnerability Management).
• Exposure to SIEM platforms is a plus.
• Experience with or exposure to endpoint management and mobile device management (MDM) platforms is a plus.
• Basic understanding of cloud computing concepts (IaaS, SaaS, shared responsibility model).
• Familiarity with device compliance policies, secure configuration baselines, or conditional access frameworks is a plus.
• Certifications, such as SC‑900, AZ‑900, CompTIA Security+, SC‑200, are a plus.

• Learn and deploy modern technologies.
• Perform a self‑starter and manage your own time.
• Analyze and solve tough technical problems by leveraging leading‑edge technologies.
• Demonstrate your expertise through a…