Transform security from a barrier to a Catalyst
Security Analyst II
Location
Kansas
Posted
2 days ago
Salary
0
Seniority
Mid Level
Job Description
Security Analyst II
Foresite Cybersecurity
• You will work inside our 24/7 Cyber Fusion Center, handling escalated security alerts, leading complex investigations for our managed customers across Google Security Operations (Chronicle) and our SOAR platform, and serving as a subject matter expert for the broader team. • Act as the primary point of escalation for our Tier 1 Analysts. • Investigate incidents end-to-end: Review complex alert context, gather evidence from Chronicle UDM and supporting tools, reach a final disposition, and either close the ticket with a documented rationale or escalate to Tier 3/Incident Response with a clear handoff. • Optimize investigation playbooks: Follow established playbooks for the detection stack, but actively identify gaps, propose workflow improvements. • Communicate clearly in tickets: Ensure all tickets are understandable by the next analyst, the customer, or an auditor reading it six months from now. • Lead communications through the ticketing system on routine and complex investigations, requests for information, and exclusion/suppression requests.
Job Requirements
- 2–4 years of prior experience in a SOC, incident response, or dedicated cybersecurity role.
- Advanced knowledge of core security concepts: Deep understanding of the cyber kill chain and MITRE ATT&CK framework, common attack vectors (phishing, credential abuse, malware delivery, lateral movement), and hands-on experience with detection, prevention, and response tactics.
- Proficiency with a SIEM: You have hands-on experience navigating SIEM platforms.
- Strong written communication: You will be writing in tickets that customers read. Clear, concise, accurate writing is non-negotiable.
- Attention to detail: False positives and true positives often look nearly identical.
- CompTIA Sec+, CompTIA CySA+, BTL1, or equivalent certification is required within 90 days of hire if not already held.
Benefits
- Robust medical insurance options to keep you and your family healthy.
- We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD).
- You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays to ensure you have time to recharge.
- Access to world-class training and mentorship.
- Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.
Related Guides
Related Categories
Related Job Pages
More Security Analyst Jobs
• Security Operations : Support the cybersecurity program, operate security tools, and create, execute, and manage security processes • Monitoring & Detection : Monitor security-related events, detect and respond to alerts and incidents, and analyze logs to identify threats and anomalies • Incident Response : Coordinate cyber incident response, work with external IR partners, conduct investigations, and perform high-level forensic analysis • Vulnerability Management : Manage the full vulnerability management process—assessments, analysis, reporting, prioritization, and coordination of remediation activities • Cloud Security : Ensure security of data and systems on-premises and in the cloud; implement and support cloud-aware security architecture • Exposure Assessment : Assess cybersecurity exposures of IT systems, conduct investigations, and prepare detailed reports • Reporting & KPIs : Assist in developing cyber-related reports and KPIs, collecting and analyzing system-generated data for designated audiences • Security Awareness : Support delivery of awareness programs develop training, build campaigns, report results, and provide recommendations • Policy Development : Support development, documentation, testing, and enforcement of cybersecurity policies, standards, and operations playbooks • Threat Intelligence : Stay current with cybersecurity landscape, analyze industry trends, and identify potential impact to technology systems and operations
Analyst II – Information Security
BCD TravelBCD Travel is a top, privately owned global travel management company under the BCD Group. Established in 2006, BCD Travel supports individuals in traveling eff
• Collaborate with internal departments on Client related matters and provide detailed feedback from Clients back to BCD Information Security and the business • Be the point of contact for complaints and escalate issues as appropriate • Coordinate and champion Security Request for Proposal(RFP) database repository • Lead the development of RFP responses and evaluate responses for accuracy • Create and facilitate responses to customer inquiries originating from RFP and assessments • Keep up to date Information security databases/repositories using Ombud, Archer, OneTouch or other tools and collect and maintain necessary audit evidence • Lead internal and external security communication efforts within BCD Travel, provide formal responses to customer security inquiries, complete and participate in Client security assessments and handle information security audits, risk remediation and mitigation efforts • Be knowledgeable on Artificial Intelligence (AI) and possess skills to sift through data using analytical tools and techniques • Collaborate with stakeholders to ensure AI aligns with organizational values and expectations • Ensure AI controls are aligned, validating output results to ensure accuracy and integrity of information • Identify and report on AI-related risks and concerns associated with internal AI use to support clients and business related assessments • Work with the development, business, sales and legal teams and advise on design and maintenance of effective information security controls compliant with ISO 27001, NIST 800-53, PCI, SOC, GDPR • Support the Information Security goals and challenges of our organization by providing a bridge from the centralized security function to the business, and assist with creation of applicable standard operating procedures
Cybersecurity Analyst
Ensemble Health PartnersEnsemble Health Partners is a hospital and healthcare company that partners with client hospitals to help them develop processes, train teams, reach their finan
• Monitor, analyze and report on cybersecurity activities and trends in IT and information security systems • Conduct vulnerability assessment of information systems and provide recommendations for risk prioritization • Coordinate with relevant teams to validate network alerts • Analyze network traffic to identify potential threats • Use cyber defense tools to analyze events and protect information systems • Perform cyber defense trend analysis and report findings
Information Security Analyst Level II – SIEM
ProficioProficio provides 24/7 security monitoring, threat detection, alerting and response services.
• Recommend refinement for detection rules to improve accuracy and reduce false positives across SIEM and EDR platforms. • Conduct investigations into security events using tools such as Splunk, Elastic, ArcSight, and XDR platforms (Cisco XDR, Cortex XDR). • Leverage AI to analyze security trends, automate processes, and identify new patterns of threat behavior. • Develop and document detection blueprints to enhance high-fidelity alerting for security threats and compliance risks. • Assist with SOAR platform workflows to improve incident response automation. • Collaborate with internal teams to address gaps in detection visibility and implement best practice mitigations. • Provide mentorship and knowledge sharing to analysts at Level I.
