Analyst - IT Security

Role Overview

The Information Security Analyst will support our IT/security team in protecting staff, volunteers, and client data across our nonprofit’s systems and cloud services.

Key Responsibilities

• Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations.
• Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures.
• Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities.
• Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions.
• Assist with managing Cloudflare security, including reviewing DNS and bot protection events.
• Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices.
• Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization.
• Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff.
• Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts.
• Assist in documenting security procedures, checklists, and “how-to” guides designed for non-technical staff and volunteers.
• Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organization’s needs.
• Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities.
• Correlate logs and security events from multiple data sources, including firewalls, IDS/IPS, web servers, endpoints, and cloud platforms, to identify indicators of compromise.
• Leverage threat intelligence, including Indicators of Compromise (IOCs) and adversary TTPs, to enhance detection capabilities and strengthen security monitoring.
• Document investigations, incident findings, response actions, and lessons learned to support continuous improvement of security operations and response processes.
• Produce security metrics, reports, and operational summaries that communicate threat trends, incident activity, and program effectiveness to stakeholders.
• Collaborate closely with Security Operations, IT, and other cross-functional teams to ensure a coordinated and effective approach to threat detection and incident response.
• Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices to continuously improve monitoring and detection capabilities.
• Other job-related duties as assigned.

Skills & Competencies

• Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege.
• Knowledge of Microsoft 365 and fundamental cloud concepts.
• Strong communication skills and patience when working with non-technical staff in a mission-driven environment.
• Proven reliability, confidentiality, and integrity in managing sensitive information.

Qualifications

• Associate's or bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps.
• 1-2 years experience in IT, Cybersecurity or other related roles.
• Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password.

Compensation & Other Information

• Location: Remote in the United States
• Pay Rate: Based on a variety of factors in accordance with applicable law including the successful candidate’s relevant experience, skills, knowledge, and experience.
• Reports To: IT Operations/Security Architect