Security Analyst II

Crutchfield Corporation•Charlottesville, VA

5d•$75,000 - $85,000•Hybrid

About The Position

Crutchfield is seeking a Security Analyst to prevent, detect, investigate, and remediate cybersecurity issues and work with operational teams to troubleshoot security technologies. The role calls for strong communication and interpersonal skills, an interest in information security, and the ability to work effectively with colleagues inside and outside IT. When unfamiliar situations arise, the analyst uses sound judgment, self-directed research, technical documentation, and consultation with colleagues to move work forward. The position follows a hybrid work model, with three days onsite each week and the remaining days remote. Candidates must be able to commute regularly to the Charlottesville office, and all remote work must be performed within Virginia. Crutchfield is unable to offer sponsorship or relocation assistance. The starting salary range is $75,000–$85,000, depending on skills and experience.

Requirements

At least two years of experience in a full-time cybersecurity role, or an equivalent combination of cybersecurity certifications and experience in a security-adjacent technical role such as systems or network administration.
Strong technical foundation with demonstrated analytical, troubleshooting, and problem-solving skills.
Working knowledge of information security principles and best practices.
Proficiency with the Windows operating system, email, Microsoft Word, and web browsers.
Strong verbal and written communication skills.
Ability to work effectively independently and as part of a team.
Self-motivation, curiosity, adaptability, and willingness to learn and share information.
Ability to commute regularly to the Charlottesville office; remote work must be performed within Virginia.

Nice To Haves

Familiarity with Microsoft Entra ID and the Microsoft Defender product suite.
Familiarity with PowerShell or other command-line interfaces.
Experience interpreting PCI DSS, NIST Cybersecurity Framework 2.0, or similar security and compliance frameworks.
Experience reviewing logs, investigating alerts, validating technical controls, or supporting incident response activities.

Responsibilities

Monitor and manage alerts from SIEM systems, server and firewall logs, network traffic, EDR platforms, email security gateways, and secure web gateways.
Review threat intelligence and other written information from trusted email and web sources to stay informed about current cyber threats.
Maintain awareness of evolving threats, technologies, and defensive practices through training and independent research.
Investigate security incidents by collecting and analyzing logs, alerts, and other available evidence.
Identify and implement appropriate measures to contain, mitigate, and remediate security incidents or identified issues.
Follow and help maintain Crutchfield incident response policies, plans, and procedures.
Prepare clear written reports about security threats, incidents, findings, and recommendations for appropriate internal or external audiences.
Audit systems against applicable standards or frameworks, including NIST Cybersecurity Framework 2.0; validate technical controls and create supporting documentation.
Assess the security posture of systems, recommend changes when needed, and coordinate implementation with appropriate operational teams.
Collaborate with cross-functional operational teams to troubleshoot security controls and technical issues, using documentation and peer expertise, and maintain accurate, reusable security documentation.
Use approved AI-enabled tools thoughtfully, understand associated risks and benefits, verify outputs, and apply independent human judgment.