Security Analyst, 2nd Shift

nuHarbor • Burlington, VT

9d • $96,000 - $118,000

About The Position

The Security Analyst is an individual contributor on nuHarbor’s Managed Services Security Operations team. The role monitors client environments, triages security alerts, and investigates findings—including complex or high-severity issues—through disposition and escalation to clients and internal teams within SLA requirements. Analysts are expected to investigate independently and escalate findings to a Senior Analyst or the Security Operations Manager when they exceed the Analyst’s scope, tooling access, or authority to act.

The assigned shift is Wednesday through Saturday, 3:00 p.m.–1:30 a.m. ET. The Analyst works with clients and internal teams to communicate security findings, recommendations, risks, and operational updates, and contributes to reporting, documentation, hand-offs, and process improvements.

Requirements

• Bachelor’s degree in a related field, or, in lieu of a degree, two years of experience in a related technology field and relevant industry certifications.
• At least two years of experience with Splunk Enterprise Security, CrowdStrike Falcon, and/or Microsoft Sentinel.
• Ability to explain basic hardening methods for network and process detections.
• Familiarity with common endpoint security best practices.
• Demonstrated knowledge of incident response concepts and procedures.
• Advanced understanding of security technologies used to mitigate cyber risks, and ability to communicate that understanding.
• Understanding of common network services and attacks against them.
• Previous experience in a technical support or security-focused role.

Nice To Haves

• Experience in a Managed Services Analyst role.
• At least one relevant industry certification, such as Security+, Network+, or CYSA+.
• Hands-on experience executing containment or response actions within an EDR/XDR platform such as CrowdStrike Falcon or Microsoft Defender.
• Familiarity with detection tuning concepts, including false-positive reduction, alert fidelity, and rule logic, sufficient to identify and flag noisy or broken detections.
• Strong written communication skills, including the ability to document technical findings clearly and accurately for escalation, hand-off, and client-facing use.

Responsibilities

• Live by nuHarbor’s corporate values: Help Clients Win, Always Improve, Protect the House.
• Analyze security alerts, events, and trends, and communicate the value of nuHarbor services to clients.
• Triage, classify, disposition, and escalate alerts within SLA requirements.
• Independently investigate findings, including complex or high-severity issues, and provide actionable, context-relevant escalations and recommendations.
• Escalate findings to a Senior Analyst or the Security Operations Manager when they exceed the Analyst’s scope, tooling access, or authority to act.
• Execute containment and response actions on client endpoints and in-scope tooling, such as host isolation, process termination, and indicator blocking, in accordance with documented client rules of engagement.
• Document tickets with an evidence trail, investigative reasoning, and disposition rationale suitable for escalation or client delivery without rework.
• Operate SIEM, MDR, mXDR, and operational incident response tooling within documented rules of engagement.
• Identify security gaps and mitigations in client environments and communicate them to internal teams and clients as directed.
• Communicate clearly with internal support teams and nuHarbor clients.
• Participate in scheduled client meetings on security operations.
• Work independently on assigned tasks and proactively support operations, including when a manager is not actively present.
• Generate reports according to nuHarbor standards and schedules.
• Develop, implement, and improve documentation.
• Identify and scope process improvement opportunities.
• Flag noisy, low-fidelity, or broken detections to a Senior Analyst or Detection Engineering for review.
• Document and communicate shift hand-offs and pass-downs according to established procedures, maintaining continuity of investigations and open items across shift boundaries.
• Stay up to date on threats, exploits, and vulnerabilities.
• Proactively identify and communicate internal and client risks.

Benefits

• Performance-based bonus opportunities; annual bonus program target opportunity of 10%.
• Generous paid time off.
• Comprehensive benefits.
• Collaborative, high-performing team environment.
• Leaders invested in employee success and development.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level