Mandry SECURE
Junior Cyber Security Analyst
Supports day-to-day security operations and vulnerability management for Mandry SECURE clients.
The Junior Cyber Security Analyst supports day-to-day security operations and vulnerability management for Mandry SECURE clients. This position responds to alerted threats, help clients, audit environments and remediate risks.
If you are looking for a place that offers a challenging and fast-paced environment with the opportunity to grow and develop, look no further! We are always looking for quality people to join our growing team. Must-haves include the ability to learn quickly, adapt to an ever-changing environment, work efficiently, and follow through on every task.
Essential Duties
- Monitor alerts and systems and evaluate detected security threats on client workstations, servers, and networks. Resolve or escalate per established procedures.
- Analyze user-reported security matters such as suspicious emails and unusual login activity. Communicate with users to gather details and explain the threat.
- Respond to and remediate business email compromise (BEC), including sign-in review, removal of malicious inbox rules and forwarding, credential resets, session revocation, and message purges.
- Triage and remediate endpoint detections from EDR and antivirus tools.
- Review internal and external vulnerability scan results. Verify the risk and prioritize by severity and exploitability.
- Work directly with clients to remediate vulnerabilities. Track progress, follow up on overdue items, and confirm fixes with re-scans.
- Monitor client security status and investigate changes or anomalies.
- Audit identity hygiene, including MFA coverage, stale accounts, and privileged account use.
- Document the identification, response, investigation, and remediation of security incidents.
- Monitor the external threat environment for emerging threats and escalate per established standards.
- Follow established escalation guidelines, resolving trained issues independently and escalating others promptly to senior staff.
- Other duties as assigned.
Responsibilities
- Install, configure, and verify security solutions for new and existing Mandry SECURE clients, ensuring agents report correctly and coverage gaps are closed.
- Prepare client reports and update client portals for Mandry SECURE reporting deliverables.
- Assist Mandry SECURE leadership with security risk assessments and gap analyses by gathering evidence, completing control questionnaires, and drafting findings for review.
- Assist clients with cyber insurance and vendor security questionnaires.
- Collect and report security metrics.
- Develop and maintain runbooks and procedures for recurring security tasks to support standardization and automation initiatives.
- Support cybersecurity audits, assessments, data calls, investigations, and incidents as required.
- Participate in the on-call rotation. On-call shifts include a bonus.
- Pursue ongoing learning through training, certifications, and industry updates.
Education and/or Experience
- 0-2 years of experience in IT support, help desk, systems administration, or security.
- A technical school certificate, associate's degree, or 4-year degree from an accredited college or university preferred. Equivalent experience considered.
- CompTIA Security+ or a similar certification preferred, not required.
Qualifications
- Familiarity with:
- Windows endpoints, networking fundamentals, and Active Directory or Entra ID
- Microsoft 365 administration and security settings
- Endpoint detection and response (EDR) and antivirus/antimalware
- Security Information and Event Management (SIEM)
- Vulnerability scanning tools
- Remote monitoring and management (RMM) tools
- Intrusion detection and prevention systems (IDS and IPS), data loss prevention (DLP), and encryption (full disk, file, data in transit)
- [Specific products in our stack]
- Exposure to, or interest in learning, regulatory requirements and frameworks such as HIPAA/HITECH, PCI DSS, SOC, HITRUST, GLBA, FERPA, NIST, and CIS Controls.
- Poise and ability to act calmly and methodically in high-pressure situations.
- Ability to think critically, with strong problem-solving skills.
- High level of personal integrity and the ability to handle confidential matters professionally.
- Eagerness to learn, strong follow-through, and the ability to work as part of a team and independently once trained.
- Good written and verbal communication skills, with the ability to explain security issues to technical and non-technical audiences.
Application
Complete the application and attach a PDF resume. We will email you a confirmation when it is received.