Senior Cyber Security Analyst

Qualus•Heathrow, FL

About The Position

Power your future with Qualus in our Information Technology department as a Senior Cyber Security Analyst. Cyber Analyst is a vital member of the Qualus IT Security & Compliance team and plays an important role in protecting the organization’s systems, networks, data, and emerging technology platforms through proactive monitoring, detection, and response to cybersecurity threats. This role requires expertise in enterprise security operations, threat analysis, and governance of modern technology ecosystems, including AI-enabled solutions, ensuring the protection of sensitive data and the resilience of business operations. The Cyber Analyst will be responsible for monitoring and analyzing security events across Qualus’ layered security architecture, including endpoint, network, email, data protection, and AI-enabled systems and services. Additionally, the Cyber Analyst will support the secure adoption and governance of Artificial Intelligence (AI) solutions across Qualus, ensuring appropriate controls, data protections, and compliance requirements are enforced. A security first mindset, strong analytical skills, and the ability to assess risk across both traditional IT systems and AI driven technologies are critical to success in this role. This position may require after hours support as determined by the needs of the business, including participation in incident response activities.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent professional experience.
5 to 8+ years of experience in cybersecurity, security operations, incident response, security engineering, IT risk, or related roles.
Hands-on experience with EDR, SIEM, email security, vulnerability management, Microsoft security tools, and data protection platforms.
Experience investigating security alerts, documenting findings, and supporting incident response activities.
Working knowledge of Microsoft Defender, Microsoft Purview, Microsoft 365 security, identity security, data classification, DLP, and audit/eDiscovery concepts.
Experience with CrowdStrike Falcon, Abnormal Security, Zscaler, Tenable Nessus, Meraki, and Falcon Next Gen SIEM/logging platforms.
Familiarity with Zero Trust, least privilege, RBAC, conditional access, MFA, and device posture concepts.
Understanding of cybersecurity frameworks and compliance expectations, including NIST 800-171, SOC 2, ISO 27001, ISO 42001, and audit evidence practices.
Ability to communicate technical findings clearly to IT, business, audit, and leadership stakeholders.

Responsibilities

Monitor, triage, and investigate alerts across endpoint, identity, email, network, cloud, SIEM/EDR, AI-enabled systems, and data protection platforms.
Correlate security events across Qualus enterprise security stack, including CrowdStrike Falcon Complete, Microsoft Defender, Abnormal Security, Zscaler Z4U, Meraki, Microsoft Purview, Tenable Nessus, and Falcon Next-Gen SIEM/logging platforms.
Support incident response activities, including alert validation, containment coordination, evidence collection, root cause analysis, corrective action tracking, and post-incident documentation.
Support Microsoft security and compliance platforms, including Microsoft Defender, Microsoft Purview, data classification, sensitivity labeling, DLP, retention, audit, and eDiscovery-related activities.
Perform vulnerability management activities using Tenable Nessus and CrowdStrike related processes, including validation, risk prioritization, remediation coordination, exception tracking, and reporting.
Support SIEM/EDR detection engineering, alert tuning, investigation workflows, and security playbook development.
Assist with enforcement of Zero Trust principles, including conditional access, identity-based controls, Federated Authentication (SSO), MFA, RBAC, least privilege, and device posture validation.
Review and support cybersecurity policies, standards, and procedures related to access control, acceptable use, data protection, AI governance, vulnerability management, incident response, and vendor risk management.
Support security assessments for SaaS platforms, cloud services, vendors, and AI-enabled tools to identify risks.
Assist with audit evidence collection, customer security questionnaires, control validation, and compliance documentation aligned with SOC 2, NIST 800-171, ISO 27001, ISO 42001, and other applicable requirements.
Stay current on threat trends, AI security risks, Microsoft security capabilities, data protection practices, and security operations best practices.
Provide guidance and knowledge sharing to team members and stakeholders as needed.
Other duties as assigned.