Cybersecurity Analyst

Our technicians handle onsite and remote support for medical offices, accounting firms and manufacturers on fixed monthly contracts. Founded in 1996, we now have 100 employees.

We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. Creekside Tech Support is hiring for the Cybersecurity Analyst role to monitor, investigate and respond to security alerts across our environment. Hybrid. You will need to be in Oklahoma City at least two days per week.

What you'll do

• Check threat intelligence feeds and IOCs against our environment
• Hand off open cases at shift change with clear notes
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests
• Tune noisy detection rules with the security engineering team
• Review firewall, proxy, VPN and authentication logs for suspicious activity
• Document incidents with timeline, impact and root cause

What we're looking for

• 3+ years in an SOC, security analyst or IT security role
• Experience reading Windows Event Logs, Sysmon and Linux logs
• CompTIA Security+ or equivalent (or ability to obtain within six months)

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

What you get

The base pay range for this position is $89,000-$114,000 a year. Actual pay depends on experience, skills and location.

• Health insurance
• 401(k) with company match
• Three weeks of PTO to start

We are unable to sponsor visas for this position.

This position requires a background check.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Creekside Tech Support.