Security & Network Analyst II

The Jackson Laboratory•Gainesville, FL

1d•$74,772 - $125,184

About The Position

Under intermediate supervision, the Security & Network Analyst II supports cybersecurity and network operations by monitoring security events, identifying potential threats, and assisting with incident response. The analyst applies developing expertise to identify risks, strengthen defenses, improve security controls, and enhance the organization’s security posture. The role works with security and network teams on threat detection, incident response, threat hunting, detection tuning, vulnerability management, and operational improvements.

Requirements

Bachelor’s degree required; a master’s degree is preferred. A combination of education and experience may be considered in lieu of a degree.
Three or more years of experience in technology, cybersecurity operations, network operations, infrastructure support, incident response, or a closely related technical role.
Demonstrated ability to work independently on complex tickets, alerts, incidents, and troubleshooting tasks with limited supervision and sound judgment about when to escalate.
Intermediate knowledge of TCP/IP, DNS, DHCP, routing, switching, VPNs, firewalls, proxy services, wireless networking, endpoint security, identity and access management, and common enterprise security controls.
Experience analyzing endpoint, identity, network, cloud, and application telemetry to identify anomalous activity, unauthorized access, malware behavior, phishing, credential abuse, lateral movement, vulnerability exploitation, or service degradation.
Ability to perform structured troubleshooting and root-cause analysis across security, network, endpoint, identity, and application layers.
Experience supporting incident response activities such as alert validation, event correlation, impact assessment, containment coordination, evidence collection, timeline development, and post-incident documentation.
Track record of initiative, resourcefulness, and improving alert quality, documentation, troubleshooting processes, and operational outcomes.
Strong organizational skills and ability to manage competing priorities in a high-volume ticket and alert environment.
Ability to maintain productive relationships with internal customers, engineers, vendors, leadership, and cross-functional technology teams.
Delivery skills, including managing tickets and investigations at a steady pace, documenting work clearly, identifying tradeoffs, and completing operational work while contributing to durable process improvements.
Domain expertise, including understanding immediate systems and their relationships with adjacent systems, staying aware of security and network trends, and applying technical knowledge to business priorities.
Problem-solving ability, including breaking ambiguous issues into investigative steps, learning from mistakes, and recommending solutions that reduce recurrence and improve reliability.
Strong communication skills, including clearly articulating technical findings, collaborating as both mentor and mentee, asking clarifying questions, giving and receiving feedback, and making space for colleagues to contribute.
Desire for continuous education.
Career-ladder readiness, with demonstrated interest and capability to progress into the Security & Network Analyst II role by developing implementation, automation, design validation, and technical ownership skills.

Nice To Haves

Intermediate knowledge of SOC, NOC, security operations, network operations, managed security, enterprise infrastructure, or hybrid security/network operations environments.
Experience using several relevant tools, such as SIEM (e.g., Splunk), EDR/XDR (e.g., Microsoft Defender or Cortex XDR), firewall management platforms (e.g., Palo Alto Panorama/PA firewalls or Cisco firewalls), vulnerability scanners (e.g., Tenable), email/phishing security tools (e.g., PhishER), IDS/IPS, packet capture tools, network monitoring systems, log analysis platforms, ITSM/ticketing systems, and cloud security or infrastructure monitoring tools.
Experience reviewing or supporting firewall policies, VPN access, network segmentation, remote access technologies, and secure connectivity workflows.
Understanding of frameworks and models such as NIST NICE, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, and MITRE ATT&CK, or similar operational security frameworks.
Experience supporting hybrid cloud or SaaS environments such as AWS, Azure, Google Cloud, Microsoft 365, Okta, or Entra ID.
Experience with scripting, automation, or query languages such as PowerShell, Python, Bash, KQL, SPL, SQL, SOAR playbooks, or API-based workflows.
Security, network, or cyber defense certifications such as Security+, Network+, CySA+, SSCP, GSEC, or CCNA, or equivalent experience.
Master’s degree.

Responsibilities

Support security and network operations focused on threat detection, cyber defense, incident response, and enterprise system security and availability.
Monitor, investigate, and resolve alerts from SIEM, EDR/XDR, IDS/IPS, firewall, vulnerability management, identity, cloud security, and network monitoring platforms.
Analyze logs and telemetry—including endpoint, authentication, firewall, DNS, proxy, packet capture, and network flow data—to identify threats, operational issues, and performance concerns.
Investigate and manage tickets involving suspicious activity, alerts, vulnerabilities, VPN issues, access requests, connectivity problems, and service interruptions.
Conduct incident response activities, including event analysis, scoping, evidence collection, documentation, containment support, escalation, and post-incident follow-up.
Troubleshoot DNS, DHCP, routing, switching, firewall policies, VPN connectivity, wireless networks, identity services, endpoints, and application access.
Assess false positives, benign activity, policy violations, operational issues, and security incidents requiring escalation or response.
Escalate complex technical issues to appropriate engineering, infrastructure, or application teams with documentation, evidence, and impact assessments.
Identify recurring issues, monitoring gaps, alert-quality concerns, and process improvements; recommend enhancements to operational effectiveness and security visibility.
Support vulnerability management by validating findings, assessing exposure, assisting with remediation prioritization, and tracking resolution.
Assist with firewall rule reviews, VPN troubleshooting, network segmentation validation, access control issues, implementation testing, and post-change monitoring.
Collaborate with security, network, infrastructure, and application teams to improve monitoring, detection, procedures, and incident response processes.
Create and maintain investigation notes, knowledge base articles, troubleshooting guides, operational procedures, and incident documentation.
Provide guidance and share knowledge with less experienced analysts; contribute to team training when needed.
Participate in security projects, technology implementations, and continuous improvement efforts.
Perform other duties as assigned.