Note: The job is a remote job and is open to candidates in USA. nuHarbor helps organizations navigate complex cybersecurity challenges through expert guidance, innovative technology, and trusted partnerships. The Security Analyst monitors client environments, triages and investigates security alerts, performs containment and response actions, documents findings, and escalates issues within service-level requirements.
Responsibilities
- Live by the nuHarbor values: Help Clients Win, Always Improve, Protect the House
- Analyze security alerts, events, and trends, and effectively communicate the value of NuHarbor services to clients
- Perform alert triage, classification, disposition, and escalation within SLA requirements
- Conduct investigations independently, including complex or high-severity findings, providing actionable, context-relevant escalations and recommendations; escalate to a Senior Analyst or the Security Operations Manager when a finding exceeds the Analyst's scope, tooling access, or authority to act
- Execute containment and response actions (e.g., host isolation, process termination, indicator blocking) on client endpoints and in-scope tooling, in accordance with documented client rules of engagement
- Document each ticket with a clear evidence trail, investigative reasoning, and disposition rationale, to a standard that supports escalation or client delivery without requiring rework
- Operate within the scope of SIEM, MDR, mXDR, and operational incident response tooling in accordance with documented rules of engagement
- Identify security gaps and mitigations in client environments and communicate them to internal teams and clients as directed
- Communicate effectively and clearly with internal support teams and nuHarbor clients
- Participate in client meetings on security operations as scheduled
- Demonstrate a team-first mindset, operating independently on assigned work and proactively supporting operations regardless of whether a manager is actively present
- Generate reports to nuHarbor standards and schedules
- Develop, implement, and improve documentation
- Identify and scope opportunities for process improvements
- Flag noisy, low-fidelity, or broken detections to a Senior Analyst or Detection Engineering for review
Skills
- Bachelor's Degree in a related field
- In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required
- A minimum of two (2) years' experience with Splunk Enterprise Security, CrowdStrike Falcon, and/or Microsoft Sentinel
- Ability to explain simple hardening methods for network and process detections
- Familiarity with common endpoint security best practices
- Demonstrated knowledge of incident response concepts and procedures
- Must have an advanced understanding of, and ability to communicate, security technologies that can be used to mitigate cyber risks
- Understanding of common network services and attacks against them
- Previous experience in technical support or security-focused role
- Willing and able to work Monday - Friday 1:00pm - 9:30pm ET
- Must be located in Hawaii
- Must be authorized to work within the United States
- Experience in a Managed Services Analyst role
- At least one relevant industry certification (Security+, Network+, CYSA+)
- Hands-on experience executing containment or response actions (e.g., host isolation, process termination, indicator blocking) within an EDR/XDR platform such as CrowdStrike Falcon or Microsoft Defender
- Familiarity with detection tuning concepts (e.g., false-positive reduction, alert fidelity, rule logic) sufficient to identify and flag noisy or broken detections
- Strong written communication skills, with the ability to document technical findings clearly and accurately for escalation, hand-off, and client-facing use
Benefits
- A collaborative, high-performing team environment
- Leaders who are invested in your success and development
- Meaningful work that helps organizations protect critical services and missions
- The encouragement to bring your authentic self to work every day
- Competitive pay
- Performance-based bonus opportunities
- Generous paid time off
- Comprehensive benefits
Company Overview