Security Analyst

• Support all phases of the intelligence lifecycle — planning, collection, analysis, production, and dissemination — under the guidance of senior analysts.
• Research known threat actors and groups, mapping observed Tactics, Techniques, and Procedures (TTPs) to the MITRE ATT&CK framework to help identify potential gaps in current defenses.
• Monitor open sources, industry feeds, and relevant forums to contribute to "big picture" reporting on how the threat environment is evolving.
• Collect and help validate technical Indicators of Compromise (IOCs) from malware reports and OSINT sources to support blocklist hygiene and reduce noise.
• Proactively research and collect threat intelligence from open-source intelligence (OSINT), commercial feeds, and internal security data.
• Assist in producing written reports, including Flash Alerts for urgent threats and contributions to monthly blogs or executive summaries.
• Monitor vulnerability disclosures and exploit trends, surfacing relevant findings for review and escalation.
• Work alongside technical teams (e.g., Incident Response, SOC) and help communicate threat findings to non-technical stakeholders in plain language.

Threat Intelligence Analyst

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

Cybersecurity Analyst

• Provide Functional Mission Analysis-Cyber assistance to identify weapon system’s critical information technology architecture and supporting infrastructure
• Investigate a diverse collection of network activities in cyberspace to determine essential Mission Relevant Terrain Cyber (MRT-C) support
• Develop a strategy to identify, evaluate, and minimize risks in the local cyberspace environment
• Create and implement strategies and techniques to merge and display relevant MRT-C
• Identify and analyze trends to define MRT-C requirements and provide guidance and alignment services
• Assist with FMA-C, identifying, mapping, and developing a defense plan to safeguard MRT-C
• Establish databases to monitor systems, design and revise user boundaries, and create indexing to make searches easier
• Utilize classified and unclassified networks and information portals to create support and information distribution plans for mission activities
• Review and provide recommendations for establishing new or revised policies, procedures, objectives, and organization design for the staff as necessary
• Coordinate with local/base SMEs to resolve events and/or incidents & brief supporting recommendations and Courses of Actions
• Define and perform vulnerability assessments leveraging threat analysis to scope and prioritize efforts
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)
• Document and escalate incidents that may cause ongoing and immediate impact to the environment

IT Security Analyst

• Handle escalated security alerts and lead complex investigations for managed customers.
• Serve as a subject matter expert for the broader team.
• Act as an escalation point for Tier 1 Analysts and guide junior analysts.
• Review complex alert context, gather evidence, and reach final disposition.
• Follow established playbooks for the detection stack and proactively propose improvements.
• Communicate clearly in tickets for subsequent analysts and customers.
• Lead communications through the ticketing system on investigations and requests for information.
• Consistently meet performance scorecards for time-to-resolve and ticket closure quality.
• Actively hunt for noisy rules and submit tuning requests to the detection engineering team.

Security Analyst II

Threat Intelligence Specialist

• Lead proactive, hypothesis-driven hunts.
• Own the hunt methodology.
• Drive the detection engineering partnership.
• Operationalize Threat Intelligence.
• Mentor SOC analysts and junior hunters.
• Lead complex incident investigations.
• Report on program outcomes.

See all jobs on JobTailor

Threat Intelligence Analyst

Cybersecurity Analyst

IT Security Analyst

Security Analyst II

Staff Threat Hunter