Security Analyst I
Security Analyst I (Part-Time) Employment Type: Part-Time Level: Entry / Level 1 Reports To: Security Operations Lead Location: Remote Schedule: Part-Time; occasional on-call availability
About the Role
We are seeking a motivated and detail-oriented Security Analyst I to join our security operations team. This is an excellent opportunity for an early-career cybersecurity professional who has a solid foundation in security principles and is looking to gain practical, hands-on experience in a Security Operations Center (SOC) environment. The Security Analyst I will serve as a first line of defense, monitoring security alerts, performing initial investigation and triage, resolving routine security issues, and escalating more complex or higher-risk incidents to senior team members. In addition to incident monitoring and response, this role will perform recurring security audits and proactive health checks to identify potential vulnerabilities, configuration issues, and other risks before they become security incidents. Key ResponsibilitiesSecurity Monitoring & Incident Response
- Monitor security alerts and events using XDR and SIEM platforms.
- Triage alerts based on severity, risk, and urgency.
- Perform initial investigation of suspicious activity and security events.
- Independently investigate and resolve routine or lower-severity security issues.
- Escalate higher-severity, complex, or ambiguous incidents to senior analysts with clear and complete documentation.
- Follow established incident response procedures, playbooks, and runbooks.
Security Auditing & Proactive Monitoring
- Perform recurring audits of network assets, user accounts, endpoints, and security configurations.
- Generate and review security health reports.
- Monitor and report on areas such as:
- Patch and vulnerability status
- Endpoint health
- User access and permissions
- Account activity
- Security configuration compliance
- Anomalous or suspicious activity
- Identify trends or recurring issues and bring them to the attention of the Security Operations Lead.
Documentation & Process Improvement
- Maintain accurate and timely documentation of investigations, findings, actions taken, and escalations.
- Ensure security events and incidents are documented in accordance with established procedures.
- Follow organizational security policies, procedures, and technical standards.
- Identify gaps in existing playbooks and runbooks and recommend opportunities for improvement.
- Maintain confidentiality and exercise appropriate judgment when handling sensitive security information.
Required Qualifications
- CompTIA Security+ certification required, or equivalent combination of relevant college coursework, cybersecurity education, and/or industry certification.
- Foundational understanding of cybersecurity principles, including:
- Networking fundamentals
- Common attack methods and security threats
- The CIA Triad
- Authentication and access control
- Basic vulnerability concepts
- General incident response principles
- Familiarity with SIEM and/or XDR technologies.
- Strong attention to detail and analytical thinking.
- Excellent written and verbal communication skills.
- Ability to follow established procedures while exercising sound judgment.
- Ability to recognize when an issue requires escalation and provide senior team members with concise, relevant information.
- Dependable, organized, and capable of working independently during scheduled shifts.
Preferred Qualifications
- CompTIA Network+, CySA+, or comparable cybersecurity certification.
- Hands-on experience with a SIEM, XDR, EDR, or other security monitoring platform.
- Basic scripting or query experience using tools or languages such as:
- KQL
- SPL
- PowerShell
- Python
- Familiarity with cybersecurity frameworks and methodologies, including:
- NIST Cybersecurity Framework
- MITRE ATT&CK
- Previous internship, academic, lab, help desk, IT, or SOC experience.
- Experience working with ticketing, case management, or security incident tracking systems.
What Success Looks Like A successful Security Analyst I will:
- Consistently monitor and appropriately prioritize incoming security alerts.
- Resolve routine security issues efficiently and accurately.
- Escalate potential incidents appropriately and without unnecessary delay.
- Produce accurate, timely audit and security health reports.
- Maintain thorough and professional documentation.
- Follow established security procedures and playbooks consistently.
- Demonstrate a willingness to learn and progressively take on more complex security investigations.
- Become a reliable first line of support for the organization's security operations.
Position Details Employment Type: Part-Time Location: Remote Schedule: Scheduled part-time shifts with occasional on-call responsibilities Reports To: Security Operations Lead Why Join Us? This position provides an opportunity to build practical cybersecurity experience in a real-world security operations environment. The ideal candidate will have the fundamentals, curiosity, and discipline to learn quickly while developing hands-on experience with security monitoring, incident response, auditing, and security operations. If you are early in your cybersecurity career and are looking for an opportunity to turn your foundational knowledge into meaningful, real-world experience, we encourage you to apply. Pay: $17.00 - $20.00 per hour Benefits:
- Flexible schedule
Work Location: Remote