Cybersecurity Analyst

About the role

The Cybersecurity Analyst owns KPI Solutions' day‑to‑day information security program, providing 24/7 detection, analysis, response and remediation of threats. The role serves as the primary technical contact for security tooling and compliance initiatives, working closely with IT Operations, compliance teams, vendors and clients.

Key responsibilities

• Monitor SIEM alerts (Rapid7 InsightIDR, Microsoft Defender, Abnormal Security) around the clock and perform first‑level triage, containment and system restoration.
• Investigate phishing, account compromise and token‑theft incidents, including mailbox reviews and malicious rule removal.
• Provide control evidence and technical support for SOC 2 Type 2 audits and quarterly cyber‑program reviews.
• Define and enforce privileged‑access management policies, conduct regular access reviews and track exceptions.
• Establish endpoint security baselines, oversee EDR/NGAV coverage, BitLocker encryption and patch deployment via Intune/ManageEngine.
• Design and maintain SPF, DKIM, DMARC records, tune phishing filters and manage mail‑security quarantine decisions.
• Review backup encryption settings, participate in disaster‑recovery testing and document results.
• Maintain network segmentation, VLAN/firewall configurations and IDS/IPS tuning.
• Maintain an asset control matrix and map critical assets to audit scope.

Required profile

• Proven experience in threat detection, incident response and security operations.
• Familiarity with SOC 2 compliance and audit processes.
• Ability to work collaboratively with IT, compliance, vendors and business units.

Required skills

• Rapid7 InsightIDR
• Microsoft Defender
• Abnormal Security
• SIEM and EDR technologies
• Email security, MDM, IAM, PAM solutions
• Jira for incident tracking
• BitLocker and USB encryption
• Intune and ManageEngine patch management
• SPF, DKIM, DMARC configuration
• IDS/IPS, VLAN and firewall management
• Asset control matrix maintenance