Junior Cybersecurity Analyst

Role overview

The Junior Analyst, Cybersecurity role is part of the security function and focuses on protecting cloud-based systems and workforce assets. The position supports day-to-day security monitoring, threat detection, and incident response, while also contributing to threat hunting and the rollout of security controls that improve the organization’s overall security stance.

This opportunity suits someone who is proactive, curious, and comfortable digging into complex security events. A solid grounding in cloud security and the ability to help implement practical safeguards are important for success in this role.

Core responsibilities

• Review, evaluate, and prioritize alerts generated by security tools, then escalate and respond appropriately when an incident is identified.
• Examine alerts from endpoint, network, and monitoring platforms to ensure they are triaged and handled according to internal standards.
• Track signals and findings from tools including GitHub, Google Security Command Center, Google Workspace, Cloudflare, JAMF Protect, and related systems.
• Investigate unusual behavior and determine whether it represents a potential security incident.
• Support incident response activities across teams and stakeholders.
• Carry out log analysis across endpoints, edge networks, and cloud environments.
• Identify vulnerabilities and coordinate corrective action with technology teams.
• Record incidents, findings, and remediation steps clearly and accurately.
• Work with Engineering and Infrastructure teams to strengthen security controls.
• Help create and deliver security awareness materials and simulation exercises.
• Stay up to date on emerging threats, vulnerabilities, and industry developments by reviewing threat intelligence and sharing useful insights with the wider team.

Minimum qualifications

• A bachelor’s degree is preferred, or a high school diploma/GED plus at least 4 years of relevant work experience.
• At least 1 year of experience in cybersecurity or information security.
• Practical experience in cloud-native environments such as Google Cloud Platform (GCP).
• Exposure to SIEM, SOAR, EDR, and similar security monitoring tools.
• Understanding of networking fundamentals.
• Familiarity with operating systems including Linux, Windows, and macOS.
• Knowledge of common attack methods and threat vectors.
• Strong analytical thinking and problem-solving ability.
• Willingness to work flexible hours and respond to emergencies on short notice.
• Ability to travel moderately overnight, up to 10%.
• Must be able to pass a 10-year background check.
• Must be legally authorized to work in the country where the role is based.

Preferred experience

• A bachelor’s degree in Computer Science, Information Security, or a related field.
• 2 years of experience in cybersecurity or information security.
• Security credentials such as CISSP, CISM, CRISC, CCSK, CCSP, or an equivalent certification.
• Experience in travel, retail, airline, or other regulated industries.
• Ability to work independently, prioritize effectively, and move initiatives forward in a fast-moving environment.
• Knowledge of container security, API security, identity and access management, and zero-trust approaches.
• Hands-on familiarity with Google Security Command Center and JAMF Protect.
• Exposure to vulnerability management and incident response processes.

Employee expectations

• Maintain consistent attendance and punctuality.
• Be ready to work flexible hours and respond quickly to urgent situations when needed.
• Maintain a professional appearance.
• Using ChatGPT or any other automated tool during the interview process will disqualify a candidate.

Work setup and environment

This is a traditional office-based position. Standard office equipment such as a computer and related tools will be provided.

Physical demands

Physical effort is generally minimal. When required, the role may involve lifting up to 10 pounds occasionally, with frequent lifting of 0 pounds.