Cybersecurity Analyst – Monitoring & Incident Response

About the role

Winsor Consulting Group is seeking a Cybersecurity Analyst to monitor, investigate, and respond to security alerts across multiple client environments. You will act as a key escalation point for security events, ensuring incidents are documented and communicated effectively while supporting the operational health of security platforms.

Key responsibilities

• Monitor alerts from SIEM, EDR, MDR, firewalls, email security, and vulnerability management tools.
• Investigate suspicious activity such as phishing, malware, endpoint alerts, and identity‑related events.
• Perform initial remediation and containment following documented procedures.
• Escalate complex threats to senior security staff.
• Assist with health monitoring and operational management of security platforms.
• Track vulnerability findings and support remediation efforts.
• Participate in on‑call rotation and after‑hours incident response as needed.
• Provide clear communication and status updates to clients during investigations.

Required profile

• 2+ years of experience in cybersecurity operations or incident response.
• Strong troubleshooting, analytical, and organizational abilities.
• Excellent written and verbal communication with a client‑service mindset.
• Ability to follow documented procedures while applying critical thinking.

Required skills

• Endpoint Detection & Response (EDR)
• SIEM and log analysis
• Multifactor authentication (MFA)
• DNS filtering
• Vulnerability management
• Phishing and malware analysis
• Identity and access management
• Microsoft 365 and Entra ID administration
• Experience with tools such as Huntress, SentinelOne, Microsoft Defender, ThreatLocker, CyberCNS/ConnectSecure
• Familiarity with ConnectWise Manage, ConnectWise Automate, or similar PSA/RMM platforms