Cyber Security Analyst

Job Description

Job Description

Description:

Our SaaS-based, cloud-first company is seeking a proactive Cyber Security Analyst.

As a Cyber Security Analyst at our company, you are a vital member of the Information Security team. You will help secure our multi-tenant cloud applications and infrastructure, particularly AWS and Salesforce, collaborating with development, IT, and operations teams to identify risks, investigate incidents, and strengthen our cloud-native security posture.

Job Description:

• Contribute to the development and maintenance of information security policies, procedures, and baseline standards; drive adoption across functional teams.
• Perform project- and solution-based risk assessments for new technologies and third-party vendors to identify security and privacy risks.
• Implement, monitor, and maintain security controls in AWS (IAM, Security Hub, GuardDuty, Config) and Salesforce (Shield, profiles, permission sets, SSO, Event Monitoring).
• Review and triage security alerts from cloud SIEM, CSPM, IDS/IPS, EDR, and AWS-native monitoring tools; correlate logs and event data to detect anomalies.
• Respond to and coordinate security and compliance assessment requests from clients and governmental agencies; track remediation through resolution.
• Assist with containment, eradication, and recovery activities during incidents; document timelines, root-cause analyses, and lessons learned.
• Perform and coordinate ongoing security reviews and assessments (penetration tests, red-team exercises, process maturity reviews) to validate control effectiveness.
• Identify vulnerabilities through threat feeds and vulnerability scans; coordinate timely remediation with stakeholders.
• Assist in measuring and tracking security and compliance metrics and KPIs; support security program enhancements and tool implementations.
• Develop and refine security awareness training materials; support ISO 27001 compliance activities and liaise with external auditors.
• Any other duties assigned by the Manager.

Job Type:

• Schedule : Full-time (40 hours per week, Monday through Friday)
• This is a hybrid role, 4 days in the office, 1 day remote. Candidates must reside within commutable distance to one of our Chicago offices.

Benefits:

• Health, Dental, Vision, Life, 401K, Vacation, Sick-Time, Holidays, etc.

Must Have:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 2+ years of experience in two or more domains of information security, risk & compliance (GRC), or IT audit.
• Hands-on experience securing AWS environments and administering Salesforce security features (Shield, Event Monitoring, SSO).
• Proficiency with cloud SIEM, CSPM, CWPP, and EDR tools.
• Familiarity with vulnerability scanning (e.g., Qualys, Tenable.io) and cloud event logs.
• Basic scripting or automation skills (Python, PowerShell, Bash).
• Excellent verbal and written communication skills and stakeholder management experience.
• Experience with GRC platforms (e.g., Vanta, Drata, OneTrust).

Need to be:

• Self-starter with ability to handle complex tasks independently and meet deadlines.
• Detail-oriented and highly organized.
• Logical and determined problem solver.
• Strong collaborator who can build positive working relationships across teams.
• Creative thinker who approaches challenges with tenacity.