Security Operations Analyst

Maine Community College System•Augusta, ME

46d•Onsite

About The Position

The Maine Community College System (MCCS) is seeking a full-time Security Operations Analyst to monitor, detect, investigate, and respond to cybersecurity threats across the organization’s environment. The role is a frontline defender within the Security Operations function and works closely with managed detection and response (MDR) partners and internal teams to identify, triage, and remediate security incidents. The position is on-site at an MCCS location. It is classified within the MSEA Support Services Unit range 21, with expected pay in the vicinity of $60,000, dependent on experience and qualifications.

Requirements

Bachelor’s degree in information technology or a related field and three years of experience in information technology or a related discipline; relevant training and experience may substitute for minimum education requirements on a year-for-year basis.
Experience working with Sophos MDR or a comparable managed detection and response service.
Familiarity with Barracuda security products, such as email security, WAF, or network/backup solutions.
Solid understanding of incident response procedures, including containment, eradication, and recovery.
Demonstrated experience or strong working knowledge of threat-hunting techniques and methodologies.
Working knowledge of common attack techniques, malware behavior, and phishing and social engineering tactics.
Familiarity with the MITRE ATT&CK framework.
Basic understanding of networking concepts, including TCP/IP, DNS, firewalls, and VPNs, and Windows, Active Directory, and Entra ID environments.
Strong analytical, documentation, and communication skills.
Ability to work effectively under pressure during active security incidents, including some after-hours/on-call availability.

Responsibilities

Monitor, detect, investigate, and respond to cybersecurity threats across the organization’s environment.
Work with MDR partners and internal teams to identify, triage, and remediate security incidents.
Conduct threat hunting and contribute to continuous improvement of security operations.