Security Analyst jobs in United States
Explore 173 matching jobs.
Security & Network Analyst II
The Jackson Laboratory
Posted: 10/19/2026IT Security Analyst
Epicor
Posted: 10/19/2026Intermediate Cybersecurity Analyst – Splunk
General Dynamics Information Technology
Posted: 10/16/2026Cybersecurity Analyst II
Frontgrade Technologies
Posted: 10/16/2026Cybersecurity Analyst – AI Focus
GuideWell Source
Posted: 10/16/2026Principal Security Compliance Analyst – FedRAMP
Entrust
Posted: 10/16/2026Senior Information Security Analyst
Planned Parenthood Federation of America
Posted: 10/16/2026Physical Security Analyst
Peraton
Posted: 10/16/2026Security Analyst Internship
OpenSesame
Posted: 10/16/2026Principal Cyber Security Analyst
Tegria
Posted: 10/15/2026Cyber Security Analyst
Easterseals PORT Health
Posted: 10/15/2026Application Security Analyst, SAST
PNC
Posted: 10/15/2026Cybersecurity Analyst
BDR Solutions LLC
Posted: 10/15/2026IT Security Analyst
DecisionPoint Corporation
Posted: 10/15/2026Senior Information Security Analyst
Wells Fargo
Posted: 10/14/2026Security Analyst – Governance, Trust
Chainguard
Posted: 10/14/2026Security Analyst – Governance, Trust
Chainguard
Posted: 10/14/2026IT Security Analyst
CIR
Posted: 10/14/2026Senior IT Security Analyst
TridentCare
Posted: 10/14/2026Security Analyst
Triumph Group
Posted: 10/14/2026
Security & Network Analyst II
The Jackson LaboratoryCore Competencies
Role fitUse this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity operations, incident response, and network security, with a strong focus on threat detection, vulnerability management, and troubleshooting across various security and network environments. Proficient in analyzing telemetry and logs to identify and respond to security incidents effectively.
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Support security and network operations focused on threat detection, cyber defense, incident response, and enterprise system security and availability.
- Monitor, investigate, and resolve alerts from SIEM, EDR/XDR, IDS/IPS, firewall, vulnerability management, identity, cloud security, and network monitoring platforms.
- Analyze logs, endpoint telemetry, authentication records, firewall events, DNS activity, proxy logs, packet captures, and network flow data.
- Investigate and manage suspicious activity reports, security alerts, vulnerability findings, VPN issues, access requests, connectivity problems, and service interruptions.
- Conduct incident response, including event analysis, scoping, evidence collection, documentation, containment support, escalation, and post-incident follow-up.
- Troubleshoot DNS, DHCP, routing, switching, firewall policies, VPN connectivity, wireless networks, identity services, endpoints, and application access.
- Evaluate false positives, benign activity, policy violations, operational issues, and security incidents requiring escalation or response.
- Escalate complex technical issues to Security Engineering, Network Engineering, Infrastructure, or application support teams with documentation and impact assessments.
- Identify recurring issues, monitoring gaps, alert quality concerns, and process improvement opportunities.
- Support vulnerability management by validating findings, assessing exposure, prioritizing remediation, and tracking resolution.
- Assist with firewall rule reviews, VPN troubleshooting, network segmentation validation, access control issues, implementation testing, and post-change monitoring.
- Collaborate with engineering, infrastructure, and application teams to improve monitoring, detection capabilities, procedures, and incident response.
- Create and maintain investigation notes, knowledge base articles, troubleshooting guides, operational procedures, and incident documentation.
- Provide guidance and knowledge sharing to less experienced analysts and contribute to team training.
- Participate in security projects, technology implementations, and continuous improvement efforts.
Requirements
What you’ll need- Bachelor's degree required; Master's degree preferred. A combination of education and experience will be considered in lieu of a degree.
- Three or more years of experience in technology, cybersecurity operations, network operations, infrastructure support, incident response, or a closely related technical role.
- Intermediate knowledge related to SOC, NOC, security operations, network operations, managed security, enterprise infrastructure, or hybrid security/network operations environments preferred.
- Demonstrated ability to work independently on complex tickets, alerts, incidents, and troubleshooting tasks with limited supervision.
- Intermediate knowledge of TCP/IP, DNS, DHCP, routing, switching, VPNs, firewalls, proxy services, wireless networking, endpoint security, identity and access management, and common enterprise security controls.
- Intermediate experience with several security, network, vulnerability management, monitoring, log analysis, ITSM/ticketing, cloud security, or infrastructure monitoring tools preferred.
- Experience analyzing endpoint, identity, network, cloud, and application telemetry to identify anomalous activity, unauthorized access, malware behavior, phishing, credential abuse, lateral movement, vulnerability exploitation, or service degradation.
- Ability to perform structured troubleshooting and root-cause analysis across security, network, endpoint, identity, and application layers.
- Experience supporting incident response activities, including alert validation, event correlation, impact assessment, containment coordination, evidence collection, timeline development, and post-incident documentation.
- Experience reviewing or supporting firewall policies, VPN access, network segmentation, remote access technologies, and secure connectivity workflows preferred.
- Understanding of NIST NICE, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, MITRE ATT&CK, or similar frameworks preferred.
- Experience supporting hybrid cloud or SaaS environments such as AWS, Azure, Google Cloud, Microsoft 365, Okta, or Entra ID preferred.
- Experience with scripting, automation, or query languages such as PowerShell, Python, Bash, KQL, SPL, SQL, SOAR playbooks, or API-based workflows preferred.
- Security, network, or cyber defense certifications such as Security+, Network+, CySA+, SSCP, GSEC, CCNA, or equivalent experience preferred.
- Ability to manage competing priorities in a high-volume ticket and alert environment.
- Strong communication, organizational, troubleshooting, documentation, and collaboration skills.
- Desire for continuous education.
ATS Keywords
✓ Tailor your resumeTip: use these terms in your resume and cover letter to boost ATS matches.