Cybersecurity Analyst

Job Overview

FrontLine Cyber Solutions is seeking a skilled and motivated Cybersecurity Analyst to join our growing cybersecurity team. The ideal candidate will possess a strong foundation in cybersecurity operations, network security, threat detection, incident response, and vulnerability management. This position requires a proactive, analytical individual who can identify, investigate, and respond to cybersecurity threats while helping protect our clients' critical IT and Operational Technology (OT) environments.

As a Cybersecurity Analyst, you will play an integral role in our Cyber Fusion Center (CFC) supporting the continuous monitoring, detection, analysis, and mitigation of cyber threats across diverse customer environments. You will work with advanced cybersecurity technologies, including Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Network Detection and Response (NDR), threat intelligence platforms, and security automation tools.

The successful candidate will demonstrate strong technical troubleshooting skills, excellent attention to detail, and a passion for cybersecurity. This position offers opportunities to work with emerging cybersecurity technologies, participate in security assessments, and contribute to protecting organizations across commercial, government, defense, and critical infrastructure sectors.

Responsibilities

• Monitor, analyze, and investigate cybersecurity alerts and events generated by SIEM, EDR, NDR, firewalls, intrusion detection systems, and other security platforms.
• Support FrontLine Cyber Solutions' 24/7/365 Cyber Fusion Center operations, identifying and responding to potential security incidents across customer environments.
• Perform initial triage, investigation, escalation, and remediation of cybersecurity incidents according to established incident response procedures.
• Conduct threat hunting activities to identify suspicious behavior, malicious activity, indicators of compromise (IOCs), and potential security breaches.
• Analyze network traffic, security logs, endpoint telemetry, and packet captures (PCAP) to identify anomalous or malicious activities.
• Configure, maintain, and optimize SIEM platforms, including alerting rules, correlation logic, dashboards, and reporting capabilities.
• Deploy, configure, and manage EDR and NDR solutions to provide comprehensive endpoint and network visibility.
• Assist with the deployment, configuration, monitoring, and troubleshooting of FrontLine Cyber Solutions' Watcher Security Appliance and associated cybersecurity technologies.
• Conduct vulnerability assessments using industry-standard scanning and assessment tools to identify weaknesses in customer systems and networks.
• Analyze vulnerability scan results, prioritize identified risks, and develop actionable remediation recommendations.
• Assist with penetration testing, security assessments, and validation of cybersecurity controls.
• Investigate potential phishing attacks, malicious emails, malware infections, unauthorized access attempts, and suspicious network communications.
• Monitor threat intelligence sources, including emerging vulnerabilities, attacker tactics, techniques, and procedures (TTPs), and indicators of compromise.
• Support cybersecurity incident response activities, including containment, eradication, recovery, root cause analysis, and post-incident reporting.
• Review and analyze firewall configurations, access control policies, network segmentation, and security architecture.
• Assist with security hardening of Windows, Linux, Windows Server, Microsoft 365, and Active Directory environments.
• Evaluate endpoint security configurations, antivirus solutions, application controls, and security policies.
• Document security incidents, investigation findings, vulnerabilities, remediation activities, and technical procedures.
• Develop and maintain incident response playbooks, standard operating procedures (SOPs), and cybersecurity monitoring documentation.
• Prepare detailed security reports, incident summaries, and recommendations for internal teams and customers.
• Collaborate with FrontLine's Technical Operations Center (TOC), cybersecurity engineers, and customer IT personnel to resolve security issues.
• Participate in cybersecurity research, detection engineering, and continuous improvement of security monitoring capabilities.
• Support the integration of cybersecurity tools, threat intelligence feeds, and automated response capabilities.
• Participate in an on-call rotation and provide after-hours support for cybersecurity incidents when required.

Experience

• Previous experience as a Cybersecurity Analyst, SOC Analyst, Security Engineer, Network Security Analyst, or similar cybersecurity position is preferred.
• Strong understanding of cybersecurity principles, security operations, incident response, and threat detection methodologies.
• Experience working with SIEM platforms such as Microsoft Sentinel, Splunk, RocketCyber, or similar technologies.
• Familiarity with EDR and endpoint security solutions such as CrowdStrike, Microsoft Defender for Endpoint, WatchGuard EDR, or similar platforms.
• Understanding of Network Detection and Response (NDR), Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS).
• Strong knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, HTTP/HTTPS, VPNs, VLANs, routing, switching, and network segmentation.
• Experience analyzing network traffic using Wireshark, tcpdump, or similar packet analysis tools.
• Understanding of firewalls, access control lists (ACLs), VPN technologies, and network security architecture.
• Experience with Windows, Windows Server, and Linux operating systems.
• Familiarity with Microsoft 365 security administration, Microsoft Entra ID, Active Directory, Group Policy, and identity and access management.
• Understanding of authentication protocols, multifactor authentication (MFA), conditional access, and privileged access management.
• Experience investigating malware, phishing attacks, suspicious network activity, and unauthorized access attempts.
• Knowledge of vulnerability scanning tools such as Nessus, OpenVAS, Qualys, or similar technologies.
• Familiarity with penetration testing and security assessment tools such as Nmap, Kali Linux, Metasploit, and Burp Suite.
• Understanding of the MITRE ATT&CK framework, Cyber Kill Chain, and common attacker tactics, techniques, and procedures.
• Familiarity with incident response processes, forensic evidence collection, and root cause analysis.
• Understanding of security logging, event correlation, alert tuning, and detection engineering.
• Experience working with security automation, scripting, or programming languages such as Python, PowerShell, or Bash is beneficial.
• Familiarity with cloud security technologies, particularly Microsoft Azure and Microsoft 365 environments.
• Experience with security ticketing systems, incident tracking, and technical documentation.
• Strong analytical and problem-solving skills with the ability to investigate complex cybersecurity incidents.
• Ability to communicate technical findings and cybersecurity risks clearly to both technical and nontechnical audiences.
• Strong organizational skills with the ability to manage multiple investigations and priorities simultaneously.
• Ability to work independently while contributing effectively to a collaborative cybersecurity operations team.
• Willingness to continuously learn emerging cybersecurity technologies, threats, and defensive techniques.
• Ability to maintain confidentiality and handle sensitive customer information appropriately.
• Availability to participate in rotating shifts, after-hours incident response, or on-call support as required.

Preferred Qualifications

• Associate's or bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related technical field. Equivalent military training, certifications, or relevant professional experience will also be considered.
• CompTIA Security+, CySA+, Network+, or equivalent cybersecurity certifications.
• Experience working in a Security Operations Center (SOC), Managed Security Service Provider (MSSP), or Managed Service Provider (MSP) environment.
• Experience supporting cybersecurity operations for multiple customers across different industries.
• Familiarity with Operational Technology (OT), Industrial Control Systems (ICS), SCADA environments, and industrial networking protocols is a plus.
• Prior military experience in cybersecurity, intelligence, communications, or information technology is valued.
• Experience developing security detections, threat hunting queries, and incident response automation is beneficial.
• Familiarity with artificial intelligence and machine learning applications in cybersecurity is a plus.

Key Skills and Attributes

• Strong technical curiosity and a passion for cybersecurity.
• Excellent troubleshooting, investigation, and critical-thinking abilities.
• Ability to recognize patterns, anomalies, and indicators of malicious activity.
• Strong attention to detail and commitment to accurate documentation.
• Ability to remain calm and make sound decisions during active cybersecurity incidents.
• Excellent verbal and written communication skills.
• Strong teamwork and customer service orientation.
• Self-motivated with a willingness to take ownership of assigned responsibilities.
• Ability to adapt to rapidly changing cybersecurity threats and technologies.
• Commitment to professional development and continuous improvement.

Why Join FrontLine Cyber Solutions?

At FrontLine Cyber Solutions, cybersecurity is not simply another IT service; it is our mission. Our team works at the forefront of cybersecurity operations, protecting organizations and critical infrastructure against increasingly sophisticated cyber threats.

As a member of our cybersecurity team, you will have the opportunity to work directly with experienced cybersecurity professionals, participate in real-world incident response operations, and gain hands-on experience with advanced security technologies.

Unlike traditional IT support positions, this role provides exposure to a broad range of cybersecurity disciplines, including threat hunting, incident response, network defense, vulnerability management, penetration testing, and cybersecurity research.

You will also have opportunities to work with FrontLine's proprietary Watcher Security Appliance, our Cyber Fusion Center, and emerging cybersecurity technologies designed to protect both traditional IT networks and complex Operational Technology environments.

We value individuals who take initiative, think critically, continuously improve their technical skills, and genuinely care about protecting our customers.

Join FrontLine Cyber Solutions and become part of a dedicated team working to defend businesses, government organizations, and critical infrastructure from today's evolving cybersecurity threats.

Job Types: Full-time, Permanent

Pay: $50,000.00 - $75,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Tuition reimbursement
• Vision insurance

Education:

• Associate (Preferred)

Experience:

• System security: 2 years (Required)
• Windows: 4 years (Preferred)

License/Certification:

• CompTIA Security+ (Required)
• CompTIA Network+ (Required)

Shift availability:

• Overnight Shift (Required)

Work Location: Hybrid remote in Idaho Falls, ID 83404