Cybersecurity Analyst

Kahana & Feld LLP•New York, NY

4d•Hybrid

About The Position

The Cybersecurity Analyst will perform the day-to-day work required to protect the firm’s systems, networks, applications, and confidential information. This role will monitor security tools, investigate alerts, support incident response and remediation, work with the CIO to complete client security questionnaires, maintain documentation, and work closely with the infrastructure team.

Requirements

Associate’s or Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional experience, is required.
Minimum of 2 years of information security, cybersecurity, or security-focused information technology experience supporting a law firm.
Hands-on experience with Microsoft 365 security and technologies such as Entra ID, Intune, Defender, Azure, or comparable platforms.
Working knowledge of network, identity, endpoint, and email security; vulnerability management; patching; encryption; and backup protection.
Experience completing client security questionnaires, collecting audit evidence, maintaining control documentation, or supporting security and compliance reviews.
Familiarity with the NIST Cybersecurity Framework, CIS Controls, ISO 27001, SOC 2, or comparable security requirements.
Ability to investigate alerts using logs, endpoint detection and response tools, event monitoring systems, vulnerability scanners, or managed security providers.
Strong attention to detail, documentation, written communication, organization, and follow-through, with the ability to manage multiple assigned tasks and deadlines.
Sound judgment, discretion, and a service-oriented approach when handling confidential information.

Nice To Haves

Security+, SSCP, or a comparable certification is preferred but not required.

Responsibilities

Implement, operate, and document security controls under approved firm policies, standards, procedures, and change-management requirements.
Monitor security alerts, logs, dashboards, and managed security service notifications; triage events, document findings, and escalate issues under established procedures.
Support incident response through evidence collection, investigation, containment, user coordination, documentation, and remediation tracking.
Run or coordinate vulnerability scans, validate findings, assign remediation tasks, and track corrective actions through closure.
Work with the infrastructure and applications teams to maintain endpoint, network, cloud, identity, email, web, and data-protection controls.
Assist with security tools for endpoint detection and response, event monitoring, email protection, multifactor authentication, mobile device management, and data loss prevention.
Support user and privileged access reviews, joiner-mover-leaver controls, and investigation of unusual sign-in activity.
Complete client and prospective-client security questionnaires by gathering current information and coordinating accurate, consistent, and timely responses.
Maintain an organized library of approved questionnaire responses, control descriptions, supporting evidence, policies, certifications, and other due-diligence materials.
Track findings from audits, tests, assessments, client reviews, and incidents, and follow up with assigned owners until completion.
Support third-party security reviews by collecting questionnaires, reviewing available documentation, recording findings, and escalating concerns.
Assist with phishing simulations, security awareness communications, user training, and follow-up coaching for employees who need additional guidance.
Maintain operating procedures, system records, incident notes, knowledge base articles, metrics, and other security documentation.
Stay current on relevant threats, vulnerabilities, product updates, and other law-firm security concerns.
Perform other assigned security duties.