Security Analyst I (F-M, 3pm-2am CST)

Ntiva, Inc.•Mc Lean, VA

8d•$49,000 - $70,000•Remote

About The Position

The Security Analyst I serves as a first line of defense against cyber threats. The role responds to security alerts, investigates potentially malicious activity, secures compromised accounts, reviews change activity, and makes routine authorized adjustments to security tools. The analyst resolves straightforward issues and escalates complex incidents to Level 2 Analysts to help safeguard client assets and data. This is a remote position, with infrequent travel potentially required. Candidates near a Center of Excellence in Lombard, Illinois; McLean, Virginia; Shreveport, Louisiana; or Overland Park, Kansas are preferred. The schedule is four days on and three days off, Friday through Monday, from 3 p.m. to 2 a.m. CST, after a required weekday day-shift training period (Monday–Friday, 8 a.m.–5 p.m. CST) whose duration depends on individual progress. The role also participates in a rotating on-call schedule. It is full-time and requires reliable attendance and full alertness during scheduled hours; additional outside employment is not permitted. The role requires 1–2 years of cybersecurity experience and 3–5 years in an IT role involving areas such as log analysis, account/access management, or endpoint troubleshooting. Candidates must have hands-on exposure to at least one EDR or SIEM platform, practical familiarity with at least one specified log-analysis or alert-queue method, and direct experience documenting tickets in ConnectWise Manage. CySA+, GCIH, or SC-200 certification (or active pursuit) is required; Security+ is a bonus. U.S. citizenship is required because of federal government contract obligations. The position involves extended periods of sitting or standing and regular use of computers and office equipment. Remote team members must maintain a dedicated, safe, distraction-free workspace protected from unauthorized access and follow company IT and security policies. The stated base pay range is $49,000–$70,000 per year. Benefits include medical, dental, and vision coverage; 401(k) with company match; company-provided life and disability coverage; HSA and PPO options; an Employee Assistance Program; paid time off, volunteer time off, and holidays; education reimbursement; and an employee referral program.

Requirements

1–2 years of experience in cybersecurity.
3–5 years in an IT role, including log analysis, account/access management, or endpoint troubleshooting.
CySA+, GCIH, or SC-200 certification, or actively pursuing one.
Hands-on exposure to at least one EDR/SIEM platform, such as SentinelOne, CrowdStrike, Microsoft Defender, or Microsoft Sentinel.
Direct hands-on experience using ConnectWise Manage for ticket documentation, with a track record of clear, timestamped, audit-ready incident notes.
Practical familiarity with at least one of SIEM log correlation, Windows Event Viewer (including Security log IDs such as 4624/4625/4648), or a ticketing-based alert queue.
Sharp attention to detail and a proactive approach to accuracy and thoroughness.
Passion for customer service and a track record of exceeding client expectations.
Enthusiasm for learning and ability to adapt to changing technology and industry developments.
Professional written and spoken English communication skills.
Ability to write business correspondence and process procedures, present information, and respond to questions from managers, clients, and the general public.
U.S. citizenship is required due to federal government contract obligations.
Reliable attendance and full alertness during scheduled hours; additional outside employment is not permitted.
Ability to work the stated Friday–Monday schedule and participate in a rotating on-call schedule.
Ability to meet the role’s physical demands, including extended periods sitting or standing and regular computer and office-equipment use.

Nice To Haves

Security+ certification.
Proximity to one of the Centers of Excellence: Lombard, IL; McLean, VA; Shreveport, LA; or Overland Park, KS.

Responsibilities

Monitor security dashboards, queues, and alerts from automated tools and escalated tickets to detect potential threats.
Conduct initial investigations of security alerts, take rapid-response actions such as securing user accounts, and collect log data for analysis.
Assess incident scope and severity, resolve straightforward issues, and escalate complex cases to Level 2 Analysts with clear, concise information.
Review and implement authorized routine changes to security tools, including client exemption requests in EDR tools and temporary settings adjustments for testing.
Collaborate with security analysts and engineers, share information, and participate in team discussions.
Communicate with end-users and clients to gather details, explain security procedures, and provide guidance during incident resolution.
Coordinate security responses and share information with other teams, including Reactive Support, Client Strategy, and NOC.
Document investigations, actions, communications, and resolutions accurately in ConnectWise.
Provide timely, helpful support for security inquiries with a professional, customer-service-oriented approach.

Benefits

Medical, dental, and vision coverage for employee and family.
401(k) with company-matched contributions; 4% match on a 5% contribution, with no vesting period. Employee and company contributions begin after 90 days.
Company-provided group term life and accidental death and dismemberment coverage.
Voluntary short-term disability and company-provided long-term disability coverage.
Health Savings Account options and PPO options.
Employee Assistance Program.
Paid Time Off, Volunteer Time Off, 8 paid holidays, and 3 floating holidays.
Education reimbursement program.
Employee referral program with cash bonuses for successful referrals.
Recognition and rewards program.
Clear promotion and advancement tracks.