Job description

Link Snacks is seeking a Cybersecurity Operations Analyst to join our Global IT organization. This role is responsible for monitoring, triaging, investigating, and responding to cybersecurity alerts across our distributed technological environments. The Cybersecurity Operations Analyst will serve as a frontline responder for security events, helping protect the organization by rapidly identifying suspicious activity and supporting containment, remediation, and recovery efforts. This position requires strong analytical skills, attention to detail, and hands-on experience working with security tools, ticketing systems, and operational support processes. In addition to incident response and alert handling, the role will support vulnerability management activities and assist with cybersecurity-related helpdesk tickets, end-user security support, and coordination with infrastructure, network, application, OT, and external security service providers. KEY RESPONSIBILITIES • Monitor, triage, investigate, and respond to cybersecurity alerts generated by SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms. • Support the security operations environment, including Microsoft Sentinel SIEM, Data Collection Rules, data collectors, data sources, alert logic, and related operational components. • Support and maintain MDR, EDR, AV and other security tools across cloud, endpoint, and network security. • Perform incident response activities, including evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up. • Identify security gaps in the environment and recommend improvements to the organizational incident response process (playbooks, policies, procedures, etc.). • Create security incident reports and present them to business stakeholders to communicate business impact, response actions, remediation status, and lessons learned. • Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies. • Support vulnerability management processes by reviewing scan results, validating findings, prioritizing remediation, tracking exceptions, and coordinating remediation with infrastructure, application, network, and OT teams. • Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and secure configuration guidance. • Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely resolution of security events. • Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating cybersecurity follow-up with vendors and internal stakeholders. • Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use. • Perform other duties as assigned. REQUIRED QUALIFICATIONS • Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience. • 2 + years of hands-on experience in cybersecurity operations, security monitoring, incident response, vulnerability management, IT support, or related technical operations. • Strong foundation in cybersecurity operations, including alert triage, incident response, endpoint security, identity security, phishing analysis, and vulnerability remediation support. • Experience using ticketing systems, security consoles, endpoint tools, identity platforms, and basic scripting or query languages to investigate and document security issues. • Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra ID, Phosphorus, Tenable Nessus, or similar enterprise security technologies. • Ability to analyze logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events, and vulnerability findings to support timely security decisions. • Proven ability to investigate cybersecurity alerts, document findings, escalate risks, and support incident response activities in a timely and accurate manner. • Working knowledge of vulnerability management, endpoint security, identity security, phishing response, access control, and common enterprise security technologies. • Ability to manage cybersecurity support tickets, communicate status clearly, and coordinate remediation activities across technical teams. • Experienced in working with security frameworks and standards such as ISO 27001, NIST, and SOC2. • Capable of working with security service providers, internal IT teams, vendors, and end users during security investigations and support requests. • Strong understanding of cybersecurity principles, risk management, encryption, authentication, and access control. • In-depth knowledge of network and infrastructure security, including virtualization, wireless technologies, and email systems. • Familiarity with security technologies and tools, including SIEM platforms, automated penetration testing tools, and cloud risk assessment methodologies. • Knowledgeable in security design, technical governance, and third-party auditing practices. • Ability to communicate complex technical issues clearly and effectively to both technical and non-technical audiences. • Demonstrated discretion in handling sensitive and confidential information. • Strong adaptability, time management, and independent problem-solving skills. • Ability to remain composed under pressure and provide after-hours support when necessary. • Willingness to travel up to 10% for training and business-related activities PREFERRED QUALIFICATIONS • Experience with platforms such as Microsoft Sentinel, Microsoft Defender, Tenable Nessus, BeyondTrust, Palo Alto, Cisco, phishing analysis tools, or other cybersecurity operations technologies. • Experience supporting security incidents from identification through containment, remediation, documentation, and closure. • Cybersecurity certifications such as CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience. • Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments. • Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting. The starting salarie for this role is $80,000.00 - $110,000.00. Actual salaries will vary based on several factors, including but not limited to external market data, internal equity, location, and candidate skill set and experience. Base pay is just one component of Link Snacks Total Rewards package for Team Members. Other rewards may include annual incentive and program-specific awards. Link Snacks provides a variety of benefits to eligible Team Members, including medical, dental and vision benefits, life and disability insurance, 401k participation, paid holidays, and paid time off. PHYSICAL DEMANDS The physical demands described here are representative of those that must be met by a Team Member to be successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job the Team Member is regularly required to sit, use hands to finger, handle, or feel and talk or hear. The Team Member is occasionally required to stand, walk, and reach with hands and arms. The Team Member must occasionally lift and/or more up to twenty-five pounds. Specific vision abilities required by this job include close vision. WORK ENVIRONMENT The work environment characteristics described here are representative of those a Team Member encounters while performing the essential functions of this job. The work environment is a plant/office setting with varying degrees of temperatures and noise levels. Exposure to manufacturing equipment movement and wet/slippery floors. However, the vast amount of work is conducted in a climate-controlled office. Travel may be required. EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER: Link Snacks provides equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic that is protected by federal, state or local law. E-VERIFY: Link Snacks is a participant in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For information about the E-Verify program, please visit: uscis.gov All your information will be kept confidential according to EEO guidelines.

Requirements

Must-haves

Monitor, triage, investigate, and respond to cybersecurity alerts generated by SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms.
Support the security operations environment, including Microsoft Sentinel SIEM, Data Collection Rules, data collectors, data sources, alert logic, and related operational components.
Support and maintain MDR, EDR, AV and other security tools across cloud, endpoint, and network security.
Perform incident response activities, including evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up.
Identify security gaps in the environment and recommend improvements to the organizational incident response process (playbooks, policies, procedures, etc.).
Create security incident reports and present them to business stakeholders to communicate business impact, response actions, remediation status, and lessons learned.
Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies.
Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and secure configuration guidance.
Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely resolution of security events.
Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating cybersecurity follow-up with vendors and internal stakeholders.
Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use.
Perform other duties as assigned.
Bachelor’s degree in Cybersecurity, Information Technology, or a related field, or equivalent professional experience.
2 + years of hands-on experience in cybersecurity operations, security monitoring, incident response, vulnerability management, IT support, or related technical operations.
Strong foundation in cybersecurity operations, including alert triage, incident response, endpoint security, identity security, phishing analysis, and vulnerability remediation support.
Experience using ticketing systems, security consoles, endpoint tools, identity platforms, and basic scripting or query languages to investigate and document security issues.
Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra ID, Phosphorus, Tenable Nessus, or similar enterprise security technologies.
Ability to analyze logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events, and vulnerability findings to support timely security decisions.
Proven ability to investigate cybersecurity alerts, document findings, escalate risks, and support incident response activities in a timely and accurate manner.

Nice-to-haves

Experience with platforms such as Microsoft Sentinel, Microsoft Defender, Tenable Nessus, BeyondTrust, Palo Alto, Cisco, phishing analysis tools, or other cybersecurity operations technologies.
Experience supporting security incidents from identification through containment, remediation, documentation, and closure.
Cybersecurity certifications such as CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
Experience securing OT/industrial networks in manufacturing or consumer packaged goods environments.
Familiarity with Power BI, Fabric, or similar tools for security data analysis and reporting.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: smartrecruiters
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off