Security Analyst

Syringa Networks LLC•Boise, ID

About The Position

Syringa is seeking a Security Analyst to serve as the first line of defense for user-focused security. The role involves triaging phishing and suspicious email reports, responding to user-related security incidents, and reviewing user behavior to identify risk activity. The ideal candidate is detail-oriented, curious, and comfortable working directly with employees across the organization.

Requirements

Familiarity with Windows endpoints, Entra ID, and Microsoft 365.
Basic understanding of networking concepts such as DNS, IP addressing, and common protocols.
Experience with a SIEM or log analysis tool.
Experience using a ticketing or service desk system.
Clear written and verbal communication, with the ability to explain security issues to non-technical employees.
Strong attention to detail and the ability to follow documented procedures consistently.
Associate's or bachelor's degree in cybersecurity, information technology, or a related field, or an equivalent combination of education and experience.
0 to 2 years of experience in IT support, help desk, network operations, or a security-related role.

Responsibilities

Monitor the ticketing queue for user-submitted phishing reports and triage each within defined response times.
Analyze suspicious messages, including headers, sender reputation, links, and attachments, using approved tools and sandboxes.
Remove malicious messages from user mailboxes and block senders and domains.
Respond to user-related incidents, including compromised accounts, malware alerts, lost or stolen devices, and suspicious sign-ins.
Follow incident response playbooks for containment, including password resets, session revocation, and device isolation.
Document incidents, actions taken, and timelines in the ticketing system.
Escalate complex or high-severity incidents to senior staff and support them during investigations.
Review identity and access alerts, including impossible travel, risky sign-ins, and unusual MFA activity.
Monitor data loss prevention and sensitivity labeling alerts for risky handling of confidential information.
Identify trends in user risk and recommend targeted follow-up or training.
Assist with periodic access reviews and account hygiene checks.
Support phishing simulation campaigns and security awareness training.
Help write and maintain playbooks, knowledge base articles, and user-facing security guidance.
Suggest improvements to detection rules, processes, and tools based on lessons learned.