Cybersecurity Analyst

Msgcu • Troy, MI

3d • Hybrid

About The Position

Safeguards MSGCU’s technology environment through daily security operations, including patching, vulnerability management, alert monitoring, and incident investigation to ensure a secure and compliant infrastructure. This role will offer a hybrid schedule after 3-6 months of training. Candidates must be within a reasonable commuting distance of our Troy, MI office.

Requirements

• 3 years of experience in cybersecurity or system administration required.
• Bachelor’s degree in Computer Information Systems, Business Administration or related field preferred.
• Experience in patching, vulnerability management, or SIEM-based security monitoring preferred.
• Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), Certified Information Systems Auditor (CISA) or similar certifications preferred.
• Uses active listening skills to gain insight and understanding into the needs of stakeholders and members in order to troubleshoot, and develop secure member-focused technology solutions.
• Understands emerging technology capabilities and assesses how they could be adapted to benefit MSGCU. Readily learns and adopts new technologies.
• Understands complex systems and data flows and asks the right questions to analyze situations, uncover root causes, and solve problems.
• Willingly takes on new opportunities and tough challenges with a sense of urgency and enthusiasm. Exhibits confidence under pressure and bounces back from setbacks.
• Plans work appropriately prior to taking action and effectively prioritizes work to meet commitments. Develops appropriate contingency plans.
• Communicates effectively with technical and non-technical audiences, effectively explaining feasible courses of action and providing actionable feedback to keep projects moving forward.
• Gains the confidence of others by modeling honesty, integrity, authenticity and behaviors that align with organizational values. Exemplifies courage by stepping up to address difficult issues.
• Actively seeks new ways to grow and be challenged using formal and informal development channels and applies lessons learned from hardships and mistakes.

Nice To Haves

• Experience in patching, vulnerability management, or SIEM-based security monitoring preferred.
• Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), Certified Information Systems Auditor (CISA) or similar certifications preferred.

Responsibilities

• Performs regular reviews of system and application security controls to ensure settings, configurations, and protective technologies remain aligned with organizational standards.
• Validates the health and effectiveness of endpoint security tools, anti-malware protections, encryption settings, and other required safeguards.
• Reviews and assesses firewall rules and related configurations to ensure they reflect current security expectations and support policy compliance.
• Provides recommendations for strengthening security controls and partners with subject matter experts to implement security related changes.
• Monitors security alerts, system logs, and threat notifications to identify unusual activity or indicators of compromise with assistance of managed services.
• Conducts initial and mid-level incident response activities, including containment steps, user communication, and documentation of actions taken.
• Supports full investigations when necessary by gathering evidence, analyzing behavior patterns, and collaborating with subject matter experts to determine root cause and long-term corrective action.
• Maintains records of incidents and response steps to support trend analysis and future prevention.
• Installs and validates security patches across servers, virtualized environments, workstations, and applications to ensure updates are applied consistently and within established maintenance windows.
• Reviews vulnerability reports and determines appropriate prioritization based on risk and system exposure.
• Assigns remediation tasks to subject matter experts when required and monitors progress to ensure gaps are addressed in a timely manner.
• Maintains documentation of patching cycles, remediation decisions, and outstanding risks to support future analysis and ongoing improvement.
• Assists with internal and external security audits by preparing required documentation, reports, and supporting evidence.
• Conducts assessments to identify security gaps and helps develop mitigation plans to address areas of non-compliance.
• Responds to audit inquiries by providing accurate, timely information on existing controls, system protections, and implemented security measures.
• Coordinates with subject matter experts to ensure audit commitments and remediation timelines are met.

Benefits

• Generous health benefits
• vacation time
• retirement plan contributions
• discounts on loans and phone service
• Medical, dental and vision on your first day!
• Health Savings Account (HSA)-eligible medical plan with no monthly premium for you (and your family)
• 3% contribution from MSGCU to 401(k) if at least 21 years old
• 100% match for the next 7% contributed to 401(k)
• 12 paid holidays
• up to 120 hours of PTO your first year of service (pro-rated based on start date)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level