Cybersecurity Analyst II

Encore Technologies - Norwood, OH

Full-time

Norwood, OH

Mining (except Oil and Gas)

About the position

Encore Technologies is seeking a Cybersecurity Analyst II to play a pivotal role in transforming the IT Operations Command Center (ITOCC) into a Security Operations Center (SOC). This position focuses on maintaining existing systems while expanding into cybersecurity monitoring, incident response, and threat management. The ideal candidate will have a background in systems administration and a keen interest in cybersecurity operations.

Responsibilities

• Support SOC Integration by collaborating with security teams to transition from ITOCC to SOC.
• Maintain and support existing infrastructure, including Microsoft Windows Servers and Active Directory.
• Assist in the triage of security alerts from monitoring systems and escalate incidents as needed.
• Set up and manage log collection, ensuring all logs are fed into the SIEM system for analysis.
• Perform regular patching of systems and collaborate with security teams to address vulnerability reports.
• Ensure adherence to cybersecurity best practices such as multi-factor authentication and least-privilege access.
• Develop scripts using PowerShell or Python to automate routine tasks and enhance monitoring processes.
• Assist in the configuration of SIEM systems and ensure relevant security data collection.
• Monitor systems for potential security threats using various security tools.
• Act as the first responder for potential security incidents and conduct initial analysis.
• Ensure security patches and updates are applied across all endpoints and network devices.
• Oversee regular backups of critical systems and ensure data restorability.
• Support the maintenance of cybersecurity frameworks like NIST 800 and CIS Top 20.
• Assist in generating security reports and metrics for management.

Requirements

• Proven experience with Windows Server, Active Directory, and virtualization platforms.
• Basic understanding of cybersecurity principles, including network security and incident response.
• Experience with PowerShell, Python, or other scripting languages for automation.
• Strong collaboration skills to work cross-functionally with IT and security teams.
• Familiarity with SIEM platforms, firewall logs, and network traffic monitoring.
• Willingness to grow within the SOC environment and learn from higher-tier analysts.

Nice-to-haves

• 2+ years of experience supporting systems administration in a production environment.
• Interest in or existing certifications such as CompTIA Security+, CCNA Cyber Ops, or similar.
• Familiarity with Azure or AWS and their security services.
• Experience working with VMware and knowledge of securing virtual environments.

Benefits

• Opportunities for advancement within systems administration and cybersecurity.