Cybersecurity Analyst

Norwich University • Northfield, VT

1d • Remote

About The Position

The Cybersecurity Analyst is a full-time remote position within Norwich University Applied Research Institutes’ growing managed SOC function. The role monitors, analyzes, and responds to security events across diverse customer environments, including state, local, and government organizations, regulated industries, and critical infrastructure operators. The analyst investigates alerts, triages incidents, and supports threat containment and remediation while helping improve SOC processes, tooling, and customer documentation.

The position involves monitoring security events, investigating and documenting incidents, reviewing logs and security configurations, communicating findings to stakeholders, and supporting customer onboarding. The analyst will also help refine runbooks, procedures, and detection logic, and participate in shift coverage as the SOC scales toward 24/7 operations. This is a remote position with a mission-driven organization working in cybersecurity, critical infrastructure protection, and national security resilience.

Requirements

• Must be a U.S. citizen.
• At least 3 years of experience in a professional work environment.
• Demonstrated cybersecurity operations experience in threat analysis, incident response, or security monitoring.
• Familiarity with network security concepts, including traffic analysis, anomaly detection, and defensive controls.
• Experience with the Elastic SIEM stack, including Elasticsearch, Kibana, and Elastic Security.
• Strong written communication skills and the ability to document incidents and findings for technical and non-technical audiences.
• Ability to work independently remotely, manage concurrent tasks, and communicate proactively with a distributed team.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• Eligible to obtain and maintain a U.S. Department of War personal security clearance.

Nice To Haves

• Familiarity with SIEM platforms such as Microsoft Sentinel or Splunk.
• Relevant certifications such as Security+, CySA+, GSEC, CEH, or equivalent.
• Experience with Microsoft 365 security tools, including Defender, Purview, and Entra ID.
• Familiarity with compliance frameworks such as NIST CSF, CMMC, NIST 800-171, or CIS Controls.
• Application security experience, including common vulnerability classes and secure configuration review.
• Malware analysis fundamentals, including identifying indicators of compromise and supporting remediation.
• Experience in a managed security service or multi-customer SOC environment.

Responsibilities

• Monitor security events and alerts across customer environments using SIEM and related tools.
• Classify, prioritize, escalate, and document security events according to defined runbooks.
• Conduct log review, correlation analysis, and initial malware and vulnerability triage.
• Assess application and network security configurations and identify anomalies or misconfigurations.
• Communicate risks and findings clearly to technical and non-technical stakeholders.
• Produce accurate incident documentation and customer-facing reports.
• Support the development and refinement of SOC runbooks, procedures, and detection logic.
• Contribute to customer onboarding, including asset inventory review and log source validation.
• Participate in shift coverage as the SOC scales toward 24/7 operations.

Benefits

• Full health insurance
• Vision insurance
• Dental insurance
• Life insurance
• Disability insurance
• Short-term insurance
• 403(b) plan with company contribution and matching
• Competitive salary commensurate with experience
• Mission-driven work and the opportunity to help build a nationally significant applied research organization

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level