Cybersecurity Analyst

Make an impact by joining ServiceSource, a champion for people with disabilities. Explore new opportunities! ServiceSource is an organization of talented people who drive innovation, embrace change, and serve humanity.

Job Summary

The Cybersecurity Analyst supports the IT Department in enhancing the organization's cybersecurity posture and improving IT service delivery by assisting in proactive threat mitigation and minimizing business disruptions. This role involves providing support in security operations and incident response, conducting research on emerging threats for analysis and policy development, assisting with regulatory compliance efforts like CMMC, and contributing to employee security awareness and training. A key focus is to streamline support operations by providing timely guidance and directly resolving security issues, thereby reducing escalations from Tier 1 and Tier 2 support staff.

Primary Duties

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. These duties and responsibilities will be rated on the Annual Performance Review.

• Tier 1 and 2 Support Escalation Mitigation: Act as the primary point of contact for Tier 1 and 2 support, providing timely guidance, resolution of common security issues, and direct resolution of cybersecurity service desk tickets to mitigate unnecessary escalations, escalating only those requiring Tier 3 or 4 support.
• Security Operations Support and Incident Response: Assist in real-time security system monitoring, incident investigation, implementation and maintenance of security tools, participation in cybersecurity projects, and support of incident response tabletop exercises.
• Security Research, Analysis, and Policy: Conduct cybersecurity threat research, assist in security audit analysis and remediation, contribute to security documentation and policy development, and monitor and support policy compliance across the organization.
• Compliance Support: Assist in ensuring regulatory compliance, preparing for and executing security audits, and benchmarking workstations, servers, and networking devices
• Employee Security Awareness and Training: Assist in developing and delivering cybersecurity awareness training and drafting and disseminating security bulletins and alerts to employees.

Additional Responsibilities

• Assist in the evaluation and testing of cybersecurity vendor products and services.
• Assist in the implementation and verification of secure network configurations.
• Monitor and analyze threat intelligence sources to identify potential security risks.
• Assist in the collection and reporting of cybersecurity metrics.
• Participate in cross-departmental collaboration on security-related initiatives.
• Actively participate in incident response tabletop exercises.
• Assist in gathering and summarizing information from cybersecurity forums and industry events.
• Assist in conducting vulnerability scans and supporting remediation efforts.
• Perform other duties as assigned.

Qualifications: Education, Experience and Certification(s)

• High School diploma or general equivalency diploma (GED) required.
• Bachelor's degree in related field preferred.
• Basic understanding of cybersecurity concepts and security operations preferred.
• Familiarity with common cybersecurity technologies, tools, and practices preferred.
• Awareness of regulatory requirements and industry standards (e.g., NIST, ISO) preferred.
• Basic understanding of network, application, and cloud security principles preferred.
• Relevant cybersecurity certifications (e.g., CompTIA Security+, Network+) preferred.

Knowledge, Skills, and Abilities

• Excellent communication and interpersonal skills, with the ability to effectively convey complex security concepts to non-technical stakeholders.
• Strong problem-solving and decision-making abilities, with a focus on risk management and mitigation.
• Ability to work collaboratively with cross-functional teams and external partners.
• Exceptional written and oral communication skills.
• Good written and communication skills, with the ability to explain basic security concepts.
• Basic problem-solving skills and ability to follow established procedures for risk mitigation.
• Ability to work effectively in a team environment and collaborate with others.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is required to sit for extended periods of time, walk in an office setting, talk, and hear. The employee must occasionally lift, move or transport moderately heavy objects, such as computers, office products and supplies, up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Dexterity of arms, hands and fingers is needed to operate a computer keyboard, mouse, tools, and other computer components.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. The noise level in the work environment is usually quiet.

We are an Equal Employment Opportunity Employer, making employment decisions without regard to a person's race, color, religion, sex (including pregnancy, sexual orientation, gender identity and transgender status), national origin, age (40 or older), veteran status, disability, or any other protected class. We are an E-Verify Employer and a drug-free workplace. Pre-employment background checks are required for all employment positions.

PAY TRANSPARENCY POLICY STATEMENT:

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information