- Cybersecurity Solutions Analyst
- Position Summary
- The Cybersecurity Solutions Analyst is a mid-level technical individual contributor within the IAM/SecOps team responsible for implementing, automating, and supporting cybersecurity solutions, with an emphasis on identity-centric controls, Microsoft security platforms, automation, and durable operational improvements.
- This role has no direct reports and may provide technical mentorship to Cybersecurity Analysts. The Cybersecurity Solutions Analyst serves as a primary escalation point for Cybersecurity Analysts and escalates complex issues to senior engineering resources as needed.
- Key Responsibilities
- Design, test, document, and maintain security automations, scripts, modules, workflows, integrations, and tooling using PowerShell, Python, APIs, Microsoft Graph, and source control.
- Serve as a primary escalation point for Cybersecurity Analysts and escalate complex issues to senior engineering resources as needed.
- Troubleshoot complex identity, endpoint, cloud, network access, data protection, monitoring, Microsoft security platform, and security tooling issues.
- Support incident response activities including investigation, containment, evidence gathering, tool-based analysis, recovery support, documentation, and post-incident improvements.
- Implement, support, and tune Microsoft Entra ID, Microsoft Defender, Microsoft Sentinel, Microsoft Intune, Microsoft 365 security, identity governance, conditional access, privileged access, access reviews, analytics, workbooks, automation rules, and connectors.
- Configure, integrate, maintain, and improve assigned security platforms, including Sentinel, Netskope, Defender, Intune, Entra ID, privileged access tools, and related technologies.
- Coordinate security tool integrations, vendor escalations, platform tuning, security platform improvements, managed SOC handoffs, and response partner support.
- Create and maintain runbooks, knowledge articles, escalation guides, procedures, dashboards, and reusable tools that enable analysts to resolve issues more independently.
- Analyze recurring tickets, alerts, exceptions, and manual processes and implement durable solutions that reduce manual work, alert noise, and escalation volume.
- Partner with IAM/SecOps, GRC, Architecture/Engineering, Infrastructure, Helpdesk/Support, vendors, and stakeholders on operational handoffs, documentation, metrics, status updates, and work tracking.
- Perform other duties as assigned.
- Required Skills, Experience & Education
- Relevant certifications such as Microsoft security certifications, Security+, CySA+, GSEC, GIAC, or equivalent experience preferred.
- 4+ years of hands-on experience in cybersecurity, security operations, identity/security engineering, IT operations, or a related field.
- Strong PowerShell scripting skills for automation, administration, reporting, and operations.
- Working knowledge of Python for APIs, integrations, or data handling.
- Practical experience with Microsoft Entra ID and identity controls such as:
- Conditional Access
- Identity Governance
- Privileged Identity Management
- Access Reviews
- Experience with Microsoft Defender, Microsoft Sentinel, Microsoft Intune, Microsoft 365 security capabilities, or comparable security platforms.
- Ability to troubleshoot complex security, identity, endpoint, and platform issues and translate findings into repeatable procedures or durable solutions.
- Experience using ticketing, work tracking, documentation, and code repository tools such as ServiceNow, Wrike, GitHub, or similar platforms.
- Excellent communication and collaboration skills with analysts, engineers, managers, vendors, and non-technical stakeholders.
- Preferred Skills, Experience & Education
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent experience.
- Experience integrating security tooling through APIs and Microsoft Graph.
- Familiarity with SIEM/SOAR concepts, managed SOC workflows, automation playbooks, alert tuning, and detection engineering support.
- Experience with:
- Netskope
- Microsoft Defender XDR
- Microsoft Sentinel
- Microsoft Intune
- Entra ID Governance
- Privileged Identity Management
- Related identity and security technologies
- Experience working in healthcare, regulated, multi-entity, or high-growth environments preferred.
- Work Environment & Schedule
- Physical Demands
- Requires sitting for extended periods, more than 66% of the workday (5.5+ hours per day).
- Travel
- Minimal travel required, generally less than 5%.
- Work Schedule & Emergency Response
- Standard business hours.
- After-hours work is rare and generally limited to:
- Scheduled maintenance windows
- Significant security incidents
Mention you found this on Data First Jobs — it helps us bring you more roles like this.
Cyber Solution Analyst
The Intersect Group
Similar Analytics Jobs
View all Analytics jobs→Exol
Transportation Senior Analyst, Supplier & Retailer Appointment
New
RemoteUSA
Exol
Transportation Senior Analyst, Planning & Load Optimization
New
RemoteUSA
Raytheon
Program Quality Senior Analyst – onsite Andover, MA
New
Andover, Massachusetts (USA)
Raytheon
Material FP&A Analyst - P3 - (Onsite)
New
McKinney, Texas (USA)
Raytheon
Air Dominance FP&A Analyst - Development
New
Tucson, Arizona (USA)
Raytheon
Program Cost & Controls Analyst (P2), Global Patriot GEM-T *HYBRID*
New
Huntsville, Alabama (USA)
Like this role? Get carefully selected jobs like it, twice a week, straight to your inbox.
Free, no spam. Unsubscribe anytime.