Security Analyst

Role overview

The Security Analyst I (Monday-Thursday, 12AM -11AM CST) handles first-line security monitoring, alert investigation, and incident triage for client environments. The position reviews potential malicious activity, secures compromised accounts, makes authorized security-tool adjustments, and documents actions in ConnectWise while escalating complex threats to Level 2 analysts.

Alert Triage and Client Protection

• Monitor security dashboards, queues, automated alerts, and escalated tickets for potential threats.
• Perform initial investigations, take rapid response actions such as securing user accounts, and collect logs for analysis.
• Determine incident scope and severity, resolve straightforward issues, and escalate complex cases with clear, actionable information.
• Implement authorized routine security-tool changes, including client EDR exemptions and temporary configuration changes for testing.
• Work with analysts and security engineers, sharing findings and contributing to team discussions.
• Communicate with users and clients to gather incident details, explain security procedures, and guide resolution.
• Coordinate with Reactive Support, Client Strategy, NOC, and other teams on security responses.
• Maintain complete investigation records, actions, communications, and resolutions in ConnectWise.
• Provide timely, professional assistance with security inquiries.

Required Technical and Communication Skills

• One to two years of cybersecurity experience and three to five years in an IT role involving log analysis, account or access management, or endpoint troubleshooting.
• CySA+, GCIH, or SC-200 certification, or active progress toward one of these credentials.
• Hands-on exposure to an EDR or SIEM platform, such as SentinelOne, CrowdStrike, Microsoft Defender, or Microsoft Sentinel.
• Direct experience with ConnectWise Manage and a record of clear, timestamped, audit-ready incident documentation.
• Practical familiarity with SIEM log correlation, Windows Event Viewer security events such as 4624/4625/4648, or a ticket-based alert queue.
• Strong attention to detail, proactive accuracy, customer-service skills, and willingness to learn evolving technologies.
• Professional spoken and written English, including business correspondence, process documentation, presenting information, and answering questions from managers, clients, and the public.
• The ability to work for extended periods sitting or standing while regularly using computers and office equipment.

Preferred credential:

• Security+ certification.

Remote Workspace, Schedule, and Eligibility

This is a full-time, salaried, exempt remote position. Proximity to a Center of Excellence in Lombard, Illinois; McLean, Virginia; Shreveport, Louisiana; or Overland Park, Kansas is preferred. Team members must be willing and able to travel when needed, although travel is expected to be infrequent.

The regular schedule is Monday–Thursday, 12 a.m.–11 a.m. CST, with four days on and three days off. Required initial training takes place Monday–Friday, 8 a.m.–5 p.m. CST; its duration depends on individual progress. The position also participates in a rotating on-call schedule. Reliable attendance and full alertness are required. Additional outside employment is prohibited regardless of its hours.

U.S. citizenship is required because of federal-contract obligations. New hires must verify identity and employment eligibility. Remote workers must maintain a dedicated, safe workspace protected against distractions, hazards, and unauthorized access. Equipment must be password-protected, confidential documents secured, and public Wi-Fi avoided. Arrangements must prevent significant caregiving interruptions during work hours, except emergencies approved by a manager. Work away from the usual dedicated workspace requires a request, management review, and compliance with remote-work policies.

Compensation and Benefits

The annual base pay range is $49,000–$70,000; the currency code is not specified. Offers reflect factors such as market location, relevant knowledge, skills, and experience. Benefit participation details are provided with an employment offer.

• Medical, dental, and vision coverage for employees and families; HSA and PPO options.
• A 401(k) with a 4% match on a 5% employee contribution, no vesting period, and employee and employer contributions beginning after 90 days.
• Employer-provided group term life, accidental death and dismemberment, and long-term disability insurance; voluntary short-term disability coverage.
• An employee assistance program.
• Paid time off, volunteer time off, eight paid holidays, and three floating holidays.
• Education reimbursement, cash bonuses for successful employee referrals, recognition and rewards, and defined promotion and advancement tracks.

Applications are accepted until October 13, 2026. Equal employment opportunity and nondiscrimination protections apply throughout recruitment and employment.