Security Analyst

Job Title: Security Analyst

Location: Boston, MA (Hybrid)
Department: Infrastructure/Security
Job Type: Full Time
Reports To: Information Security Lead

About the Role

We are seeking a detail-oriented and proactive Security Analyst to join our growing security team. This role is critical in protecting our organization’s systems and data from cyber threats. The ideal candidate will have a strong technical background, keen analytical skills, and a passion for staying ahead of evolving security risks.

Key Responsibilities

• Monitor networks, systems, and applications for security threats and vulnerabilities.

• Investigate security incidents, perform root cause analysis, and develop remediation plans.

• Respond to alerts generated by security tools (SIEM, IDS/IPS, antivirus, etc.).

• Perform architectural review of new system design/software

• Conduct regular vulnerability assessments and penetration testing.

• Audit systems and applications to ensure security standards are being met and maintained.

• Collaborate with IT and engineering teams to implement security best practices.

• Assist in maintaining and updating security policies, procedures, and documentation.

• Support compliance initiatives (e.g., NIST, PCI-DSS)

• Stay informed of the latest security trends, tools, and technologies.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent work experience).

• 2–4 years of experience in an information security or SOC role.

• Experience with endpoint protection tools, firewalls, IDS/IPS, and vulnerability scanners.

• Solid understanding of TCP/IP, common network protocols, and operating system internals.

• Excellent problem-solving, analytical, and communication skills.

Preferred Qualifications

• Security certifications such as Security+, CEH, GSEC, or CISSP.

• Experience in cloud security (AWS, Azure, or GCP).

• Scripting or automation skills (Python, Bash, PowerShell).

• Experience with the following security platforms:

• Palo Alto

• Microsoft Defender Suite

• Zscaler ZPA/ZIA

• Vulnerability Management Software (Rapid7 or similar)

• Experience with industry standards and compliance (e.g. NIST, PCI-DSS)