Security Analyst (hybrid)

14553 - Security Analyst (Hybrid) - Tallahassee, FL Start Date: ASAP Type: Temporary Project Estimated Duration: 12+ months with possible extensions Work Setting: Hybrid. Only candidates able to relocate as required should apply to avoid removal from future consideration. Required: • Experience with combined IT and security work within a cybersecurity discipline (4+ years); • Experience with KQL, Python, PowerShell, or batch scripting (3+ years); • Experience with cloud computing and cloud computing security (2+ years); • Experience with security issues, techniques, and implications across computer platforms; • Experience with regulatory frameworks including NIST 800-53r5, CJIS Security Policy, and 60GG-2; • Experience with MITRE framework including TTPs; • CJIS certification (or ability to obtain). Preferred: • Cybersecurity certifications such as Security+, CySA+, Network+, SSCP, CISSP, CCSP, SecurityX/CASP+, or PenTest+; • Bachelor's degree or higher in Computer Science, Information Security, or a related field. Responsibilities include but are not limited to the following: • Monitor security platforms including SIEM, EDR, and cloud-native security tools for indicators of compromise, indicators of attack, and incident response requirements; • Utilize Microsoft Defender XDR components (Endpoint, Cloud Apps, Identity, Office 365) for monitoring, analysis, and response; • Identify, triage, and investigate phishing incidents, including those submitted manually by end-users; • Perform Identity and Access Management activities with a focus on identifying and managing risky users, risky sign-ins, and sign-in event correlation; • Conduct in-depth investigations of security alerts, perform triage, and escalate or resolve incidents according to established procedures; • Maintain, tune, and optimize security detection rules, alerts, and automations to reduce false positives and improve detection accuracy; • Produce thorough documentation including after-action reports, lessons learned, and security reporting aligned with incident severity and organizational standards.