cybersecurity analyst

We're looking for a hands-on Cybersecurity Analyst to support day-to-day security operations across a hybrid cloud and on premise environment. In this role, you'll work directly on threat detection, incident response, vulnerability management, and compliance execution, going beyond monitoring dashboards to actually close security gaps as they arise.

This is an individual contributor role designed for someone who wants real ownership from day one. You'll be hands-on across identity, endpoint, network, and cloud security, and will have a direct line to leadership to flag what's genuinely at risk versus what's under control.

Some of the responsibilities you will be entrusted with:

• Monitor and triage alerts across SIEM, EDR, and cloud security tooling, escalating and driving incidents through to resolution.

• Own vulnerability management, including scanning, prioritization (based on CVSS, exploitability, and asset criticality), and remediation tracking.

• Support identity and access reviews, focusing on least privilege, access recertification, and Zero Trust posture improvements.

• Maintain and tune detection content aligned to MITRE ATT&CK, reducing false-positive noise over time.

• Assist with control implementation and evidence collection for frameworks in scope (e.g., SOC 2, ISO 27001, NIST CSF/800-53).

• Participate in incident response, including evidence and log analysis, containment actions, and post-incident documentation.

• Help maintain security policy and technical documentation, mapped to relevant controls.

• Work across both on-premise and cloud infrastructure.

Requirements

• 1-2 years of experience in a security operations, IT security, or systems administration role with security responsibilities.

• Working knowledge of at least one SIEM platform (e.g., Splunk, Sentinel, Elastic, or LogRhythm) and one EDR platform.

• Comfortable working in both Linux and Windows environments; scripting ability in Python, PowerShell, or Bash is a plus.

• Familiarity with IAM concepts, network fundamentals (firewalls, segmentation, VPN), and cloud security basics.

• Exposure to at least one compliance framework (SOC 2, ISO 27001, PCI-DSS, HIPAA, or NIST); you don't need to be the compliance owner, but you should understand what "evidence" means in this context.

• Relevant certifications are a plus but not required, such as Security+, GCIH, GSEC, CySA+, or a cloud security certification.

Benefits

Why This Role:

• Direct mentorship, with a fast path to broader ownership (architecture, incident response lead, compliance lead) as you prove yourself.

• A small team where your work is visible and valued, rather than a cog-in-a-ticket-queue role within a large SOC.

• Special rates for our staff members across the entire Domes Resorts portfolio.

• We're an equal opportunity employer, committed to building our team on merit, with fair and consistent hiring practices regardless of race, gender, age, disability, sexual orientation, religion, or background.

• Modern, hybrid working environment (flexibility where applicable).

• Employee wellbeing initiatives and team-building activities.