Cyber Security Analyst

Winston Staffing is recruiting on behalf of a Fortune 500 global industry leader for a junior cybersecurity professional. The role supports enterprise security operations through alert triage, incident response collaboration, vulnerability tracking, cyber risk and GRC activities, documentation, and metrics reporting.

Responsibilities:

• Security Operations & Triage: Monitor and triage real-time alerts across enterprise SIEM, EDR, cloud, and email security platforms; conduct initial root-cause analyses, document findings, and escalate high-severity incidents
• Incident Response Collaboration: Support active investigations under the guidance of senior analysts, assist in gathering and preserving forensic evidence, and contribute to post-incident debriefs and lessons-learned documentation
• Vulnerability & Threat Tracking: Assist with threat intelligence gathering and support vulnerability management by validating, prioritizing, and tracking remediation efforts across business systems
• Cyber Risk & GRC Support: Maintain risk registers, collect security/compliance evidence, evaluate control effectiveness, and support the ongoing development of automated risk management workflows and executive KPI dashboards
• Documentation & Metrics: Maintain technical operating procedures, build knowledge base articles, and prepare operational status metrics for security leadership

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline (or equivalent hands-on practical/lab experience)
• 0 to 2 years of practical cybersecurity experience, including previous corporate cybersecurity internships, co-ops, or university SOC lab environments
• Solid conceptual understanding of Security Operations Center (SOC) workflows and Incident Response methodologies
• Familiarity with enterprise SIEM/EDR platforms (exposure to Microsoft Sentinel and Microsoft Defender is highly advantageous)
• Awareness of core cybersecurity frameworks (NIST CSF, CIS Controls, ISO 27001)
• Analytical curiosity, meticulous attention to detail, proactive written/verbal communication, and the discipline to thrive in an autonomous, fully remote environment
• Exposure to data querying, dashboarding, or scripting tools (Power BI, SQL, Python, or workflow automation) is a strong plus
• Industry-standard entry-level certifications are welcome (e.g., CompTIA Security+, Microsoft SC-900, AZ-900)