Secuity Analyst, (Contract)

Macmillan•,

46d•$35 - $45

About The Position

Our team is looking for a Security Analyst contractor with the project length of 3 months. This role involves rapid incident response, making critical security decisions during high-risk events, and collaborating across teams. The analyst will adapt to emerging threats, refine security strategies, and provide clear documentation and reporting. Responsibilities include incident investigation, threat hunting, security policy tuning, data analysis, and technical communication. Automation and scripting skills are preferred but not required.

Requirements

Threat Detection & Response: Strong understanding of Microsoft Defender XDR, including malware detection, threat hunting, and automated response.
Identity Security & Access Management: Experience with Microsoft Entra ID, including Conditional Access Policies, MFA, and privilege escalation monitoring.
Data Security & Insider Threat Detection: Familiarity with Varonis for file access monitoring, data exfiltration detection, and insider threat response.
Phishing & Email Security: Knowledge of Google Admin Console for phishing email investigations, domain blocking, and attachment scanning.
Incident Investigation & Reporting: Understanding of security log analysis, SIEM investigations, and security reporting best practices.

Nice To Haves

Automation & Scripting: Familiarity with PowerShell, KQL, or Python for security automation and custom detections.
3+ years in cybersecurity operations, threat intelligence, or security engineering.
Experience with Microsoft Defender XDR, Microsoft Entra ID, Varonis, and Google Admin Console preferred.
Incident response and forensic analysis experience a plus.
Familiarity with the ServiceNow ticketing system preferred.

Responsibilities

Rapid Incident Response: Quickly assess, isolate, and mitigate security threats.
Decision-Making Under Pressure: Make critical security decisions during high-risk events.
Collaboration Across Teams: Work closely with IT, security, and leadership to ensure a coordinated response.
Adaptability: Adjust to emerging threats and refine security strategies as needed.
Clear Documentation & Reporting: Deliver concise security reports and actionable insights.
Incident Investigation & Threat Hunting: Ability to analyze security alerts, perform advanced hunting, and escalate high-risk incidents.
Security Policy Tuning: Capable of adjusting detection rules, refining access controls, and optimizing security settings.
Data Analysis & Trend Identification: Experience in reviewing logs, identifying security trends, and compiling findings into actionable reports.
Technical Communication: Ability to document and present findings to security teams, IT personnel, and executive leadership.