Cyber Security Analyst

BROE Group and it's managed affiliates•Denver, CO

3d•Hybrid

About The Position

The Cyber Security Analyst is responsible for the day-to-day operation, administration, and continuous improvement of OmniTRAX cybersecurity technologies, processes, and controls. This role monitors security events and threat activity; investigates and responds to incidents; supports vulnerability identification and remediation efforts; and assists in the development, implementation, and maintenance of security policies, standards, and procedures. Working closely with infrastructure, application, and business teams, the Cyber Security Analyst helps safeguard company systems, information assets, and business operations across all cybersecurity concerns. This role requires a hands-on, service-oriented professional who can balance operational response, risk reduction, technical troubleshooting, documentation, and cross-functional collaboration. The Cyber Security Analyst demonstrates and adheres to the company values of safety, honesty, ownership, respect, and teamwork to ensure a successful partnership with customers and employees that result in OmniTRAX’s continued success.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field; equivalent combination of education and relevant experience may be considered.
4+ years of experience in cybersecurity, information security, security operations, IT infrastructure/security administration, or a related role.
Hands-on experience supporting and operating cybersecurity technologies in one or more of the following areas: endpoint security, Microsoft 365 security, identity and access security, SIEM/log management, email security, vulnerability management, network/security monitoring, or incident response.
Working knowledge of core security principles, including least privilege, defense in depth, vulnerability management, secure configuration, identity protection, and incident response practices.
Ability to investigate alerts, analyze technical issues, determine probable cause, and coordinate timely corrective action with appropriate stakeholders.
Familiarity with Microsoft enterprise technologies and cloud environments, including Active Directory, Azure/Entra, Microsoft 365, and security-related administration concepts.
Understanding of networking fundamentals and common protocols, including TCP/IP, DNS, DHCP, VPN, Wi-Fi, and firewall/security concepts.
Strong analytical, troubleshooting, organizational, and problem-solving skills with attention to detail and documentation quality.
Ability to manage multiple priorities, work independently, and respond effectively in situations requiring urgency and sound judgment.
Excellent verbal and written communication skills, with the ability to explain technical risk and recommended actions to non-technical stakeholders.
Professional integrity, accountability, discretion, and a customer-service mindset.

Nice To Haves

Experience with security technologies such as Microsoft Defender, Barracuda, Okta, Entra ID, TrendMicro, or related platforms.
Experience supporting phishing response, security awareness platforms, vulnerability remediation coordination, and policy/procedure development.
Exposure to security frameworks and control concepts such as NIST CSF, CIS Controls, or similar best-practice standards.
Experience working with managed security partners, third-party vendors, or external auditors.
Experience in transportation, logistics, industrial, real estate, or other multi-site operating environments.
Comp Industry certification such as CompTIA Security+, CySA+, SSCP, SC-200, SC-300, SC-900, GSEC, or a comparable cybersecurity certification.

Responsibilities

Monitor, administer, and maintain cybersecurity tools and platforms used to protect endpoints, identities, email, cloud services, networks, and company data.
Review, investigate, and triage security alerts, suspicious activity, and reported events; escalate issues appropriately and coordinate containment, remediation, and recovery activities.
Participate in incident response activities, including evidence gathering, documentation, communication, root-cause analysis support, and follow-up corrective actions.
Perform day-to-day security operations tasks such as alert monitoring, log review, case tracking, ticket management, and operational reporting.
Support the administration and tuning of security technologies such as endpoint protection, email security, SIEM/logging, vulnerability management, multi-factor authentication, identity security, and related defensive controls.
Assist with vulnerability identification, prioritization, validation, and remediation follow-up in coordination with infrastructure, application, and business stakeholders.
Help identify cybersecurity weaknesses, recurring issues, and process gaps; recommend practical improvements that strengthen protection, visibility, and response readiness.
Assist in creating, updating, and maintaining cybersecurity policies, standards, procedures, playbooks, diagrams, inventories, and other operational documentation.
Support access control and identity security activities, including account reviews, privileged access considerations, MFA enforcement support, and general security hygiene practices.
Contribute to phishing response, security awareness reinforcement, and user guidance related to suspicious emails, unsafe behavior, and common security risks.
Coordinate with internal IT teams, business stakeholders, and third-party vendors or service providers to support security initiatives, investigations, and remediation plans.
Assist with internal and external audit requests, compliance support activities, exception tracking, evidence collection, and control documentation as needed.
Prepare metrics, dashboards, or summary reporting related to incidents, vulnerabilities, tool health, trends, and operational performance for technology leadership.
Maintain current knowledge of emerging threats, vulnerabilities, attacker techniques, and cybersecurity best practices relevant to OmniTRAX’s environment.
Participate in after-hours response activities and provide support for critical cybersecurity incidents outside normal business hours when required.
Maintain knowledge about current and emerging technologies, threats, and defensive practices that may benefit the company.
Participate in cybersecurity and technology projects, including implementation, rollout, testing, hardening, and operational transition activities.
Perform other duties and projects as assigned.