Security Analyst

• Lead real-time monitoring, triage, and analysis of complex security events, providing verifiable assessments of threats and incident severity.
• Engineer and automate advanced detection use cases across DigitalOcean's cloud and corporate environments, leveraging deep knowledge of adversary TTPs to design and implement scalable alerting solutions.
• Develop, track, and report on key metrics for security monitoring effectiveness and incident response performance, using data to drive improvements.
• Own and evolve the security monitoring program strategy, ensuring alignment with evolving threat landscapes and business priorities.
• Work closely with Infrastructure Security Engineers to identify log sources, integrate, and maintain data pipelines (e.g., log sources, forwarders, parsing, enrichment).
• Perform proactive threat hunting and hypothesis-driven investigations and investigate anomalous activity to uncover hidden or emerging threats within DigitalOcean’s environments.
• Mentor and guide lower level analysts, reviewing escalated incidents and providing technical leadership during incident response.
• Coordinate threat analysis using historical data and architecture diagrams to identify attack vectors.
• Collaborate with multiple teams to close monitoring gaps and improve overall security.
• Optimize security tools and processes to reduce false positives, improve detection fidelity, and automate response workflows where appropriate.
• Lead the creation and maintenance of detailed playbooks, runbooks, and documentation to standardize detection and response efforts.

Senior Security Analyst

• Perform information security risk analysis and risk management processes and technologies
• Provide research and operational support to teams within Information Security Management
• Work with cross-functional teams for several initiatives
• Help with reporting and metrics
• Assisting with central intake, triage requests, and tickets

Information Security Support Analyst I

• Respond and perform analysis on security alerts and incidents.
• Support technical investigations of complex or high-severity security threats or incidents.
• Coordinate information security incident response with SNHU's Information Security Incident Response Plan.
• Support the incident response lifecycle and have the analytical mindset needed when it comes to escalated investigations and investigations into novel security incidents.
• Participate in incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis.
• Work cross-functionally across ITS and all SNHU teams to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable.
• Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s).
• Conduct real-time monitoring of security events from multiple sources and use analytical and critical thinking skills to identify, triage, analyze, investigate, and escalate information security events and alerts.
• Help perform investigations in complex or high-severity security threats or incidents.
• Communicate with partners, in a non-technical manner, at all organizational levels as part of incident response and remediation activities.
• Review and help implement standard operational processes for handling common incident types.
• Demonstrate a deep source of ethics, integrity, and confidentiality.
• Can remain calm and function at the highest level during a crisis.

Information Security Analyst I

• Monitor and analyze security logs and alerts for suspicious activity
• Investigate and respond to security incidents to mitigate potential threats
• Develop, implement, and enforce organizational security policies and procedures to ensure adherence to best practices and compliance with industry standards
• Conduct security risk assessments and vulnerability scans to detect potential weaknesses in systems, networks, and applications, and propose appropriate mitigation strategies
• Manage and maintain essential security technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint detection and response (EDR), identity and access management (IAM), and cloud security posture management (CSPM) solutions
• Provide security awareness training to employees to promote safe practices
• Stay up-to-date on emerging cyber security threats, vulnerabilities, and industry trends

Cyber Security Analyst

Threat Intelligence Specialist

• Collaborate with Cyber Architecture and Engineering team to assist with the design, implementation, and administration of various security technologies which are relate to threat hunting, threat detection, and the overall Cyber Fusion Center
• Work closely with counterparts in IT and across the Cyber Fusion Center to align technical solutions with business needs
• Apply a structured business architecture approach and methodology for capturing the key views of the enterprise
• Collaborate with Cyber Intelligence, Security Operations Center analysts, and Offensive Security analyst to effectively conduct tactical and strategic threat hunting efforts that are pertinent to State Street and its subsidiaries and affiliates
• Assist with the identification of logs sources that are valuable to threat hunting and detection
• Assist with the onboarding and tuning of log sources to provide better effectiveness
• Extensive knowledge of Advanced Persistent Threat (APT) groups and Tactics, Techniques, and Procedures used by APT groups
• Knowledge of the MITRE ATT&CK framework and its usage for improving threat detection and prevention capabilities
• Ensure the effective management and delivery of cyber fusion services
• Support development and implementation of Cyber Fusion Center strategies aligned to key State Street risk and business needs, Support the design and implementation of Cyber Fusion Center/SOC operating models, identifying, evaluating, and providing solutions via a threat and intelligence based approach
• Build and nurture positive working relationships with the intention to exceed client expectations
• Work cross-functionally with team members to support and drive a collaborative team environment

Cyber Fusion Threat Hunt Response Analyst

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.
• Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond.
• Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors.
• Looking for a candidate currently living in the eastern time zone (EST)

Security Analyst – Mid-Atlantic region

• operationalizing the Threat Intelligence Platform (TIP)
• tracking priority threats
• delivering actionable, detection‑driven intelligence to security teams and leadership
• identifying, analyzing, and tracking cyber threats that may impact the organization
• collecting intelligence from a wide range of internal and external sources
• analyzing and contextualizing threat intelligence
• supporting security operations through actionable insights
• monitoring and analyzing intelligence from commercial, industry, and OSINT sources
• maintaining and using Threat Intelligence Platforms (TIP)
• integrating intelligence across security tools
• collecting, enriching, and managing actionable IOCs
• providing real‑time intelligence context during investigations and incidents
• responding to ad hoc and time‑sensitive intelligence requests from stakeholders
• producing and delivering intelligence reports and briefings for technical and non‑technical audiences

Cyber Threat Intelligence Analyst

• Design scalable analytical frameworks to evaluate diverse datasets across customer, product, and operations domains.
• Aggregate and harmonize structured and unstructured data into unified customer insight models.
• Build, deploy, and maintain AI/ML models to identify patterns in sentiment, feature demand, and churn risk.
• Translate data findings into clear, actionable insights that inform product prioritization and roadmap decisions.
• Partner with Product, UX, and Customer Success teams to define key experience metrics and develop dashboards that provide real-time visibility into customer trends.

Data Science Analyst – Customer & Product Intelligence

Incident Response Analyst

• Serving as the point of contact for cyber systems events to manage communications and coordination
• For cyber breaches by vendors, working closely with the Cyber team, gathering details on the cyber breach, applying lessons learned and documenting events
• For client cyber breaches, collaborating with the Cyber team, Anti-Fraud, and other stakeholders in coordinating responses and documentation
• Coordinating the cyber incident response process from initial detection to resolution, ensuring timely action and communication
• Enhancing incident response documentation and procedures
• Point of escalation for the cyber incident management team and fostering collaboration
• Participating in cyber-related tabletop exercises and conducting social engineering exercises

Cyber Incident Response Manager

• Support the delivery of trusted security services to Aqueduct customers under the direction of Security Operations leadership.
• Assist with managing multiple client environments, help customers mitigate threats and vulnerabilities, and strengthen overall security posture.
• Contribute to programs related to Managed Threat Detection and Response (MTDR), Microsoft Security Operations, and security assessments while collaborating with customers who subscribe to Aqueduct services.
• Analyze and review security alerts, logs, and incidents using Managed Detection and Response (MDR) tools under the guidance of Security Operations leadership.
• Support and conduct monthly security reviews for Aqueduct SecOps customers.
• Assist in the administration, monitoring, and optimization of Microsoft security technologies, including Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, and Microsoft 365 security capabilities.
• Support penetration testing activities, including evidence collection, documentation, and report preparation.
• Work with customers to identify and proactively mitigate security vulnerabilities under supervision and established procedures.
• Document customer security control effectiveness and escalate improvement recommendations through the Security Operations team.
• Stay up to date with emerging cyber threats and security trends through training, mentorship, and structured development within the Security Operations team.

Cybersecurity Analyst

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

IT Security Analyst II

• Support the development, implementation, and monitoring of security policies and controls
• Collaborate with Global Security to ensure alignment with enterprise security standards and frameworks
• Investigate security incidents and collaborate with internal teams for effective resolution
• Coordinate post-incident reporting and remediation
• Partner with the Vulnerability Management team to drive vulnerability remediation, recommend controls, create playbooks
• Conduct periodic access reviews and report security access violations
• Create and deliver high-quality written communications on security, compliance, and audit issues
• Support internal security projects, automation efforts, and process improvements
• Adopt and extend AI-assisted security tooling to reduce toil, accelerate investigations, augment, and simplify recurring security workflows
• Collaborate with engineering teams to embed security best practices into the software development lifecycle (SDLC) and cloud environments
• Perform security assessments of new products and services to ensure the adequacy of security and privacy.

Security Analyst jobs in Massachusetts

See all jobs on JobTailor