Cyber Security Analyst
HRCap, Inc.
About the Role
Our client is a venture-backed, high-growth technology enterprise scaling enterprise-grade cloud solutions and secure data infrastructure. We are seeking an analytical, vigilant, and tech-fluent Cybersecurity Analyst I to join our fully distributed Global Security Operations Center (SOC). In this foundational role, you will protect corporate digital assets, monitor real-time network event streams, and triage security alerts across multi-cloud environments to mitigate vulnerabilities and maintain a proactive defense posture.
Key Responsibilities
- Security Event Telemetry & Triage: Monitor, analyze, and triage real-time security alerts generated across Enterprise SIEM consoles and EDR platforms.
- Incident Escalation & Tracking: Assess incoming threat alerts (phishing, malware execution, unauthorized access attempts), categorize severity levels, and route actionable anomalies to Tier-2 incident responders using established playbooks.
- Vulnerability Assessment Support: Assist in executing regular automated vulnerability scans across cloud infrastructure, tracking patching timelines, and verifying remediation cycles with system administrators.
- Phishing & Email Security Operations: Investigate reported suspicious emails, analyze header records, execute safe URL/attachment sandboxing, and implement localized blocklist rules to safeguard corporate users.
- Security Hygiene Compliance: Audit access control logs, verify MFA enforcement policies, and help document security controls to satisfy SOC 2, ISO 27001, or NIST regulatory frameworks.
Requirements & Tech Stack
- Education: Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or an equivalent technical or quantitative discipline.
- Core Technical Literacy: Fundamental, conceptual understanding of networking protocols (TCP/IP, DNS, HTTP/S), cloud architectures (AWS, Azure, or GCP), and standard operating system internals (Linux/Windows).
- Scripting Foundations: Basic capability reading or editing scripts in at least one modern language—specifically Python or PowerShell—to parse logs and automate basic data transformations.
- Proactive Remote Communication: Exceptional written and verbal communication skills. You must excel at drafting clear technical incident logs.
Qualifications
- 0 to 2 years of professional experience. Entry-level technical position; robust cybersecurity internships, university hands-on lab projects, active participation in CTF competitions, or an extensive GitHub portfolio demonstrating script-driven security tools are highly valued.
- Preferred: Basic foundational certifications such as CompTIA Security+, Network+, Cisco CyberOps Associate, or AWS Certified Cloud Practitioner.
- Preferred: Practical exposure to SIEM or log aggregation tools (such as Splunk, Elastic Security, or Microsoft Sentinel) during coursework or internships.
- Preferred: Familiarity with common security analysis frameworks (such as the MITRE ATT&CK matrix or OWASP Top 10).
Job Location & Details
- Location: Fully Remote (United States)
- Visa Support: OPT / STEM OPT Validation & H1-B Sponsorship Provided
- Salary Range: $70,000 – $90,000 USD base structure + Performance Bonus, Remote Workspace Technology Stipends, and Premium Corporate Health, Dental, and Vision Plans.