Cybersecurity Analyst – Server & Incident Response

About the role

The Cybersecurity Analyst will provide first‑level technical support and protect the server production and development domains of Aultman Health Foundation. The role focuses on monitoring, incident response, and strengthening security controls across Windows, cloud, and hybrid environments.

Key responsibilities

• Collaborate with Tier 1 and Tier 2 support to troubleshoot desktop and server issues.
• Proactively monitor servers for abnormal behavior and review EDR/MDR alerts.
• Participate in incident response activities and threat hunting using SIEM, EDR, and NDR tools.
• Assist in QA testing, integration of new server/desktop software, and security hardening.
• Secure Office 365/Azure environments and support SCCM/SCEM deployment.
• Administer Active Directory, DNS, IIS, Exchange Server, and Citrix.
• Identify, assess, and remediate vulnerabilities through scans and mitigation tools.
• Implement automated response workflows with SOAR platforms.
• Troubleshoot security issues such as logs, permissions, firewalls, and certificates.
• Support cloud and hybrid security initiatives, including PKI management.
• Perform other assigned security projects and duties.

Required profile

• Associate’s or Bachelor’s degree in Computer Science, Cybersecurity, or related field, or equivalent experience.
• 3–5 years of hands‑on cybersecurity experience.
• Experience in vulnerability management, security assessments, security awareness, and identity‑access management.
• Proven ability to create and maintain technical documentation.
• Strong communication and customer‑service skills.
• Team‑oriented, independent, punctual, and security‑focused mindset.

Required skills

• SIEM
• EDR / MDR
• SOAR
• Incident response
• Exchange Server administration
• SCCM administration
• Citrix administration
• Windows Server environment
• Vulnerability scanning
• Threat hunting
• NDR
• PKI
• Office 365 / Azure
• Active Directory
• DNS
• IIS
• Cloud and hybrid security