Data Security Analyst - 3rd Shift

Dewpoint•Lansing, MI

3d•$40,000 - $60,000

About The Position

The Data Security Analyst is an entry-level technician supporting a Security Operations Center (SOC) on nights and weekends. After training, the analyst responds to and investigates SOC alerts, alarms, emails, and phone calls in a timely manner. The role focuses on safeguarding clients by monitoring and analyzing security events, identifying threats, and responding to incidents. It also supports protection of assets and enhancement of the organization’s security posture by staying current with cybersecurity trends and best practices. The analyst conducts pretext calls and designs phishing email campaigns to assess and improve security awareness, simulate real-world social engineering threats, identify vulnerabilities, and strengthen defenses. The position requires U.S. citizenship or naturalized-citizen work authorization status due to required security accesses and clearances. The employee must be located in the Midwest, preferably Michigan, to meet work-hour requirements. W2 employment only; C2C and third-party submissions are not accepted.

Requirements

U.S. citizenship or naturalized-citizen work authorization status due to required security accesses and clearances.
Must be located in the Midwest, preferably Michigan, to meet work-hour requirements.
Experience with Microsoft operating systems.
Ability to learn Unix.
Knowledge of general networking tools and concepts.
Adaptability, attention to detail, growth orientation, problem-solving ability, teamwork, and time-management skills.
Verbal and written communication skills.
Ability to travel.

Nice To Haves

Unix experience.
Incident response experience.
Vulnerability management experience.
Help desk experience.

Responsibilities

Monitor and respond to alerts and communications from clients and coworkers.
Review daily reports and enforce policies and controls.
Enter time in Paylocity in real time and submit weekly time entries.
Read and respond to emails and phone calls.
Track goals, analyze weekly goals, and prepare monthly reports.
Attend SOC and monthly compliance meetings.
Participate in listed annual activities, including SOC face-to-face meetings, awareness events, and continuing professional education for certifications.
Update Confluence documentation and review documents as a second set of eyes.
Review ticketing contacts and organize KeePass contacts.
Conduct social engineering activities, research for Talk Team, and contribute to the security blog.
Conduct pretext calls and design phishing email campaigns to assess security awareness and identify vulnerabilities.
Monitor and analyze security events, identify threats, and respond to incidents.
Stay up to date with cybersecurity trends and best practices to enhance the organization’s security posture.