The Associate Analyst, Cybersecurity is an entry-level security role for a motivated individual with an IT foundation who is actively building security knowledge. Working under close direction of the Senior Analyst and Director of Information Security, this person executes day-to-day security tasks accurately, escalates early, documents thoroughly, and grows steadily toward Analyst I proficiency.
Security Monitoring & Incident Response
-
Learn to monitor security alerts using Cato and Checkpoint alongside the Senior Analyst, building triage judgment before working independently.
-
Under Senior Analyst guidance, document alert details, gather initial context, and flag events for review; does not independently close alerts until proficiency is demonstrated.
-
Assist during incident response as directed; document findings accurately while the Senior Analyst or Director leads investigation and containment.
-
Document all incidents and lessons learned; help manage the daily FreshService inbox and InfoSec mailbox under Senior Analyst oversight.
-
Follow established security playbooks step-by-step; ask the Senior Analyst before deviating from any documented process.
Vulnerability Management
-
Learn to run vulnerability scans using Tenable under Senior Analyst instruction, with scope and results reviewed before distribution.
-
Keep vulnerability tracking records current as directed; Senior Analyst determines prioritization and owner communications.
-
Verify remediation activities to confirm vulnerabilities are fully resolved.
-
Pull and organize vulnerability data as directed; does not interpret trends or produce reports independently.
Identity & Access Security
-
Learn identity and access controls within Microsoft Entra ID; assist with assigned tasks under Senior Analyst direction.
-
Assist with access reviews by pulling reports and logging entries; flag anomalies to the Senior Analyst and process removals only after approval.
-
Learn to recognize anomalous sign-in and access patterns; escalate all concerns to the Senior Analyst.
Vendor & Third-Party Risk
-
Gather vendor documentation and complete questionnaire sections as directed; does not independently evaluate or rate vendor risk.
-
Complete vendor questionnaire entries accurately; flag anything unclear to the Senior Analyst.
-
Keep third-party risk register records current as directed; does not modify risk ratings without Senior Analyst approval.
-
Participate in software onboarding reviews prior to procurement approval.
Security Governance, Compliance & Awareness
-
Assist with maintaining InfoSec policies and procedures; support internal audits and compliance reviews.
-
Administer phishing simulations, coordinate security training assignments, and track completion rates.
-
Contribute to disaster recovery documentation and tabletop exercises.
-
Stay current on emerging threats and developments relevant to higher education.
Qualifications
Required
- Bachelor’s degree from an accredited institution in any field; IT or technical background a plus
- Experience in IT support, helpdesk, or systems administration; no prior cybersecurity experience required
- Basic familiarity with Microsoft 365 and Windows; M365 security tool experience a plus
- General understanding of user accounts, permissions, and access concepts from an IT perspective
- Strong written and verbal communication skills; able to document findings clearly
Preferred
- CompTIA Security+ in progress or planned within first 12 months
- Hands-on exposure via home labs, TryHackMe, Hack The Box, or similar platforms
- Demonstrated curiosity about cybersecurity through self-study or personal projects
- Experience with ticketing systems such as FreshService or ServiceNow
- Pursuit of a degree or certification in cybersecurity or information technology
Bachelor's degree in any field; IT support or systems administration experience; basic Microsoft 365 and Windows familiarity; strong communication skills; no prior cybersecurity experience required.
Key Responsibilities
- monitoring security alerts
- documenting incidents
- running vulnerability scans
Skills & Tools
Cato, Checkpoint, Tenable, Microsoft Entra ID, Microsoft 365, Windows, FreshService, ServiceNow, TryHackMe, Hack The Box
Job Details
- Category: Information Technology
- Seniority: Entry Level
- Commitment: Full Time
- Workplace: Remote — Salt Lake City, Utah, United States
- Languages: English
About Nightingale Education LLC
An education company providing cybersecurity and IT services. — Industry: Education