Cybersecurity Analyst

Jockey International, Inc.•Kenosha, WI

2d•Onsite

About The Position

The Cybersecurity Analyst, reporting to the Information Security Manager, plays a pivotal role in safeguarding Jockey’s digital assets and ensuring the integrity of Jockey’s Information Technology (IT) infrastructure. This role is responsible for monitoring and executing cybersecurity operations, identifying vulnerabilities, responding to cybersecurity incidents, and implementing security best practices to safeguard business operations across distribution, retail, and corporate environments. The ideal candidate has a strong technical foundation, is an analytical thinker, is detail-oriented, and has a passion for staying ahead of evolving cyber threats.

Requirements

Bachelor’s degree in Information Security, Information Technology, Computer Science, or related field (or commensurate combination of coursework, work experience, and/or certification(s)).
1-3+ years of experience in IT.
Working knowledge of enterprise network technologies (e.g., firewalls, routers, switches, wireless access points, VPN, IdP, MFA, desktop & server operating systems, etc.).
Familiarity with security tools (e.g., SIEM, EDR/HIPS/HIDS, DLP, NIPS/NIDS, email security, etc.).
Familiarity with IT operations in a Microsoft 365 enterprise/Azure cloud setting.
This position may require the employee to support systems off hours on a rotational basis due to the 24/7 nature of operations.
Occasional travel may be required.

Nice To Haves

Experience working in a cybersecurity role or implementing security controls is preferred.
Hands-on experience with security tools is preferred.
Hands-on experience with Microsoft 365 enterprise/Azure cloud is greatly preferred.
Experience using CrowdStrike, Arctic Wolf, Proofpoint, CATO, and/or Netwrix is a plus.
Working knowledge of cybersecurity compliance frameworks/governance preferred (e.g., NIST SP 800-53, ISO 27001, SOC 2, GDPR, PCI-DSS, etc.).
Industry-recognized certifications in cybersecurity operations are strongly preferred (e.g., CySA+, SANS GSOC/GCFA/GCED/GCIH, etc.).
Industry-recognized certifications in general cybersecurity or other relevant IT/cybersecurity domains are a plus (e.g., SSCP, SANS GSEC, CC, Security+, Net+, etc.)

Responsibilities

Monitor networks and systems for intrusion attempts as a front-line detection analyst, leveraging a variety of tools and platforms (e.g., SIEM, EDR, and related telemetry).
In rotation with other team members, support 24/7 Security Operations Center (SOC) operations on an on-call basis to meet defined alert triage/response timelines.
Support the SOC Engineer and other team members to refine prevention/detection/response capabilities and hone tools/platforms (e.g., rule tuning) to prevent false negatives and minimize false positives.
Ensure required endpoint agents are deployed and kept current across the enterprise.
Track endpoint coverage and agent compliance; report detection-impacting gaps and drive remediation coordination with endpoint/infrastructure owners.
Audit and, where appropriate, participate in endpoint lifecycle workflows (e.g., onboarding/offboarding, exceptions, etc.) to ensure complete and consistent coverage.
Collaborate with infrastructure/help desk teams to verify IT Asset Management (ITAM) processes are implemented properly and inventory is accurately captured/maintained.
Perform technical investigation of alerts/events/incidents across SIEM, EDR, network, identity, and cloud platforms; maintain investigation timeline, evidence, and case notes throughout.
Execute triage, containment, eradication, and recovery/remediation actions following relevant playbooks under an established Incident Response Plan (IRP).
Participate in incident debriefs, identify gaps and lessons learned to drive improvements to the IRP, playbooks, and other processes/documentation.
Assist with vulnerability assessments, scanning, and analysis; support Information Security leaders and other IT teams to prioritize remediation efforts.
Leverage cyber threat intelligence to assess risk to systems/information, refine detection methodology, prevent compromise, and prioritize vulnerability remediation.
Document all work performed and actions taken, such as through workflow logs, ticket comments/notes, etc.
Follow an established reporting matrix for events and incidents, ensuring necessary parties are informed within time requirements.
Continuously pursue opportunities for both self-improvement and team improvement, such as: Enhancements or alternatives to existing processes and tools, Formal education, training, or certification programs, Security platform vendor-provided trainings, conferences, etc., Tabletop events, technical labs, or cybersecurity exercises (e.g., “Capture the Flag”).
Stay up to date on cybersecurity news, emerging threats/vulnerabilities, trends, etc.