Cybersecurity Analyst

Full-time - Mid Level

Minneapolis, MN

Merchant Wholesalers, Nondurable Goods

About the position

Manage day-to-day security operations including following up on triggered alerts, reviewing and monitoring SIEM logs, and ensuring the effective use of cybersecurity tools. Strengthen the company's security posture by working with NIST and CIS controls, leading efforts in the security awareness training program and ensuring end-user compliance with security best practices. Partner with the Cybersecurity Specialist on a wide range of security tasks.

Responsibilities

• Regularly monitor and analyze security events and alerts from the SIEM tool and Security Operations Center (SOC) partner; respond promptly to alerts related to potential threats such as malware, unauthorized access, and system vulnerabilities
• Investigate security incidents triggered by alerts, perform root cause analysis, and collaborate with the Cybersecurity Specialist to resolve issues; follow up on unresolved alerts and ensure thorough documentation of findings and actions taken
• Support the implementation of NIST and CIS cybersecurity controls across the organization; regularly audit and assess compliance with these standards, ensuring controls are being adhered to in daily operations
• Manage and enhance the organization's security awareness training program, ensuring employees are trained to recognize phishing threats and follow best practices to mitigate risks
• Conduct simulated phishing campaigns, analyze results, and provide feedback to end-users to improve awareness
• Monitor end-user compliance with security protocols, ensuring employees adhere to security policies, especially related to phishing and other common attack vectors; provide guidance and training as necessary
• Maintain accurate documentation of incidents, resolutions, and security processes
• Prepare reports for senior management on the status of security incidents, tool performance, and compliance with security controls
• Work closely with the Cybersecurity Specialist to improve security strategies and incident response procedures
• Research emerging cyber threats and apply lessons learned to improve the company's security posture
• Perform regular threat hunting throughout the enterprise network environment to identify threats that evade existing security measures
• Share knowledge and insights to continuously enhance the security posture of the organization
• Comply with all food safety requirements, training, policies, and procedures
• Perform other job-related duties as assigned

Requirements

• Bachelor's degree in computer science, information security, or related field or equivalent work experience
• Security+ (CompTIA), Cisco CyberOps, Offensive Security OSCP, or other relevant certifications desired
• 2+ years of experience in cybersecurity with a focus on incident response, security monitoring, and threat management
• Experience managing or contributing to email phishing programs including conducting phishing simulations, analyzing results, and enhancing employee awareness of security threats
• Strong knowledge of SIEM, EDR, and other cybersecurity tools; familiarity with Microsoft 365, Microsoft Entra, Active Directory (AD), and common enterprise IT systems
• Understanding of NIST and CIS cybersecurity frameworks with experience implementing and auditing these controls
• Strong ability to analyze logs, alerts, and security data to detect, investigate, and resolve security incidents
• Proficient in identifying vulnerabilities and weaknesses in IT systems
• Excellent communication skills, both written and verbal, with the ability to report on incidents, trends, and vulnerabilities in a clear and actionable manner
• Strong critical thinking and problem-solving abilities with the capacity to react quickly and effectively to security incidents and threats
• Ability to work closely with other IT team members and company employees to support security needs and requests

Benefits

• Comprehensive benefits package
• Annual bonus eligibility
• Incentive and recognition programs
• 401k contributions