Cybersecurity Analyst

Cybersecurity Analyst I – Collectibles

Position Overview:
The Cybersecurity Analyst I reports directly to the Senior Director of Cybersecurity and plays a crucial role in maintaining and enhancing the security posture of the Collectibles business within the Security Operations Center (SOC). The Analyst is responsible for the daily security monitoring and management of our production, office, and network environments, emphasizing SIEM and SOAR operations, vulnerability management, detection engineering, and incident response. This role ensures compliance with corporate security standards and proactively safeguards corporate assets against unauthorized access and emerging threats.

Key Responsibilities:

• Continuously monitor, analyze, and respond to security events to protect corporate assets.
• Stay updated on current cybersecurity threats relevant to the industry and geographical regions.
• Assist with onboarding, configuring, tuning, and managing Sumo Logic for effective SIEM operations.
• Support the configuration, management, and optimization of Qualys for comprehensive vulnerability management.
• Analyze and respond to security alerts from various security tools, endpoints, operating systems, and cloud platforms (AWS, Azure).
• Contribute to the implementation, operation, and continuous enhancement of the company's vulnerability management lifecycle, including scanning, analysis, prioritization, and remediation activities.
• Develop, tune, and maintain detection rules and analytics to enhance security alert effectiveness.
• Generate and deliver clear, actionable KPIs and security reports suitable for executive-level review.
• Assist in cybersecurity investigations and incident response efforts, following established processes and guidelines.
• Participate actively in our SOC's on-call rotation to maintain readiness and effectively respond to cybersecurity incidents.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or related field, or equivalent practical experience.
• Minimum 1 year experience administering SIEM and SOAR solutions, with hands-on Sumo Logic experience preferred.
• Minimum 1 year experience managing vulnerability assessment tools, with Qualys experience preferred.
• Minimum 1 year experience with Endpoint Protection products, CrowdStrike experience preferred.
• Familiarity with cloud security environments, including AWS and Azure, understanding alerts, tools, and security features.
• Knowledge and practical application of the MITRE ATT&CK framework to identify, categorize, and respond to threats.
• Clear understanding of threat indicators such as Indicators of Misconfiguration (IoM), Indicators of Attack (IoA), and Indicators of Compromise (IoC).
• Familiarity with standard Incident Response procedures and practices.
• Basic scripting knowledge (Python, PowerShell, or similar) is required.
• General understanding of regulatory compliance frameworks (SOX, GDPR, CCPA).
• Excellent verbal and written communication skills with the ability to clearly articulate technical information to both technical and non-technical audiences.
• Certification required: Security+ or CySA+. Certifications like SSCP or CISSP are beneficial but not mandatory.

 

Ensure your Fanatics job offer is legitimate and don’t fall victim to fraud. Fanatics never seeks payment from job applicants. Feel free to ask your recruiter for a phone call or other type of communication for interview, and ensure your communication is coming from a Fanatics email address (including @collectfanatics.com). For added security, where possible, apply through our company website at www.fanaticsinc.com/careers.
 

In NYC, the salary range for this position is $85,000-$106,000, which represents base pay only and does not include short-term or long-term incentive compensation. For other remote locations in the US, the salary range is $68,000-$85,000. The NYC range is specific to NYC and may not be applicable to other locations and the other remote location salary range may vary by region. When determining base pay, as part of a final compensation package, we consider several factors such as location, experience, qualifications, and training.

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.