Cybersecurity Analyst

APTIM•Houston, TX

2h•Onsite

About The Position

APTIM is seeking a highly skilled Cybersecurity Analyst with expertise in the Microsoft Security Stack and enterprise security to join our growing team. This role focuses on protecting critical systems by designing, implementing, and managing security solutions across cloud and on-premises environments. The ideal candidate will play a key role in strengthening security posture, driving threat detection and response, and ensuring alignment with modern cybersecurity frameworks and best practices.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
7+ years of experience in cybersecurity, network security, or cloud security roles.
Strong expertise in Microsoft Security solutions, including: Microsoft Defender (Endpoint, Identity, Cloud, Office 365), Microsoft Sentinel (SIEM/SOAR), Entra ID (Azure AD), Conditional Access, Identity Protection, Microsoft Purview and compliance solutions.
Experience with Azure security tools, Azure Security Center, and Azure Policy.
Strong understanding of network security concepts (firewalls, IDS/IPS, VPNs, segmentation).
Knowledge of Zero Trust architecture and principles.
Experience in incident response, threat hunting, and digital forensics.
Scripting experience with PowerShell, Python, or KQL.
Strong analytical, problem-solving, and communication skills.
Must be a U.S. Citizen and able to work at government sites.

Nice To Haves

Certifications such as Microsoft Certified: Cybersecurity Architect Expert (SC-100), Azure Security Engineer Associate (AZ-500), CISSP, or CEH.
Experience with hybrid environments (Azure, AWS, on-premises).
Familiarity with CMMC, NIST CSF, ISO 27001, and similar frameworks.
Experience with tools such as Microsoft Sentinel, Defender, Fortinet, Silverfort, and BeyondTrust.
Knowledge of DevSecOps practices and infrastructure-as-code (IaC).
Hands-on experience with security automation and SOAR tools.

Responsibilities

Design and implement security solutions using Microsoft Defender, Sentinel, Entra ID (Azure AD), and Purview.
Secure Azure environments and enforce best practices aligned with NIST, CIS, and Zero Trust principles.
Evaluate and enhance firewall policies, VPN configurations, and network segmentation strategies.
Monitor, detect, investigate, and respond to security incidents using SIEM/SOAR tools such as Microsoft Sentinel.
Implement and enforce PAM, Conditional Access, and MFA policies.
Perform vulnerability assessments, penetration testing, and remediation across systems.
Utilize Microsoft Defender XDR and automation tools to streamline incident response.
Support compliance with frameworks including CMMC, NIST CSF, NIST 800-171, and SOC 2.
Partner with IT and business teams to align security with organizational goals.
Promote security best practices through training and awareness initiatives.