Cybersecurity Analyst

BRG • Washington, DC

2d

About The Position

BRG is seeking a Cybersecurity Analyst to support cybersecurity monitoring, investigation, and response activities across Microsoft 365, cloud services, and identity platforms. The role focuses on security event triage, incident support, remediation coordination, and validation of security controls aligned to BRG standards (least privilege, secure configuration baselines, and audit-ready documentation). The position requires prior cybersecurity experience and the ability to operate both independently and within a structured team environment. BRG combines world-leading academic credentials with world-tested business expertise and purpose-built emerging technologies. The company's culture centers on agility and connectivity, bringing together specialist consultants, industry experts, renowned academics, and leading-edge data scientists. Together, they apply diverse real-world experience, data, and intelligence to economics, disputes, investigations, corporate finance, and performance improvement services, addressing complex challenges for organizations globally. BRG's unique structure fosters interdisciplinary relationships, enabling informed insights and original thinking, and leveraging global reach and resources to deliver results.

Requirements

• Demonstrated cybersecurity fundamentals and practical experience triaging alerts, validating suspicious activity, and documenting incident findings.
• Working knowledge of identity security concepts and telemetry, including Entra ID/Azure AD sign-in activity, risky users/sign-ins, roles/groups, MFA, and conditional access principles.
• Strong background in Active Directory, Entra ID (Azure AD), and enterprise user lifecycle/access management, including provisioning/deprovisioning, group-based access, privileged account handling, and access governance practices in a tiered AD environment.
• Familiarity with Microsoft security tooling and workflows (Microsoft Defender and/or Microsoft Sentinel), including log review and evidence collection.
• Hands-on familiarity with vulnerability and security monitoring platforms, including Tenable/Nessus (including Tenable.io), Netwrix, and Zscaler, with the ability to interpret findings and support remediation tracking.
• Understanding of endpoint and server security concepts on Windows platforms, including common attack patterns, persistence indicators, and response actions.
• Strong written and verbal communication skills with the ability to document technical information clearly for both technical and non-technical audiences.
• Strong organizational skills with the ability to manage multiple priorities and maintain attention to detail in a regulated enterprise environment.
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field; equivalent practical experience considered.
• Minimum of two (2) years of hands-on cybersecurity experience in security monitoring, incident response support, threat triage, or a related security-focused role.
• Ability to travel occasionally for key meetings or collaboration sessions, as needed.
• Availability to participate in periodic after-hours incident support in rotation, as applicable.
• Candidate must be able to submit verification of his/her legal right to work in the U.S., without company sponsorship.

Nice To Haves

• KQL familiarity is preferred
• Familiarity with PowerShell or automation concepts is preferred; ability to use existing scripts and procedures safely is valued.
• Relevant certifications are a plus (not required), such as Security+, SC-200, AZ-500, or equivalent.

Responsibilities

• Monitor and triage security alerts and events across Microsoft security platforms and related tooling, documenting findings, severities, and recommended actions in accordance with established procedures.
• Conduct initial investigation and evidence collection for security incidents involving identity compromise, endpoint threats, suspicious email activity, and cloud security findings; escalate complex or high-severity cases to senior staff.
• Coordinate and track remediation efforts for security findings (vulnerabilities, misconfigurations, risky sign-ins), including verification, closure documentation, and status reporting.
• Support identity and access security processes, including privileged access workflows, access reviews, and enforcement/validation of baseline identity controls aligned to least-privilege standards and approval requirements.
• Support user and access management activities within a tiered Active Directory security model, including adherence to administrative tiering, privileged account separation, and controlled role assignment practices across Active Directory and Entra ID.
• Assist with routine security control validation across Microsoft 365 and cloud services, including posture checks, policy effectiveness verification, and operational reporting.
• Maintain and improve operational documentation (runbooks, SOPs, knowledge articles) based on recurring work, trend analysis, and lessons learned.
• Participate in scheduled maintenance windows and security validation activities as needed.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees