Security Analyst - Third (3rd) Shift at NuHarbor Security

Job description

Cybersecurity for the public good. At nuHarbor, we help organizations navigate an increasingly complex cybersecurity landscape with confidence. By combining expert guidance, innovative technology, and trusted partnerships, we make security stronger, more effective, and easier to understand. We're looking for talented individuals who are passionate about solving meaningful challenges, helping clients succeed, and continuously improving alongside a team that values curiosity, collaboration, and impact. The Opportunity The Security Analyst is an individual contributor within nuHarbor's Managed Services Security Operations team, responsible for monitoring client environments, triaging security alerts, and conducting investigations, including complex or high-severity findings, through to disposition and escalation to clients and internal teams within SLA requirements. Analysts are expected to work through difficult findings on their own, escalating to a Senior Analyst or the Security Operations Manager when a finding exceeds their scope, tooling access, or authority to act. Shift Sunday - Wednesday 12:00am - 10:30am ET (4 days x 10 hours) What you will do Live by the nuHarbor values: Help Clients Win, Always Improve, Protect the House. Analyze security alerts, events, and trends, and effectively communicate the value of NuHarbor services to clients. Perform alert triage, classification, disposition, and escalation within SLA requirements. Conduct investigations independently, including complex or high-severity findings, providing actionable, context-relevant escalations and recommendations; escalate to a Senior Analyst or the Security Operations Manager when a finding exceeds the Analyst's scope, tooling access, or authority to act. Execute containment and response actions (e.g., host isolation, process termination, indicator blocking) on client endpoints and in-scope tooling, in accordance with documented client rules of engagement. Document each ticket with a clear evidence trail, investigative reasoning, and disposition rationale, to a standard that supports escalation or client delivery without requiring rework. Operate within the scope of SIEM, MDR, mXDR, and operational incident response tooling in accordance with documented rules of engagement. Identify security gaps and mitigations in client environments and communicate them to internal teams and clients as directed. Communicate effectively and clearly with internal support teams and nuHarbor clients. Participate in client meetings on security operations as scheduled. Demonstrate a team-first mindset, operating independently on assigned work and proactively supporting operations regardless of whether a manager is actively present. Generate reports to nuHarbor standards and schedules. Develop, implement, and improve documentation. Identify and scope opportunities for process improvements. Flag noisy, low-fidelity, or broken detections to a Senior Analyst or Detection Engineering for review. Your Foundation We're looking for someone who brings these minimum qualifications: Bachelor’s Degree in a related field In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. A minimum of two (2) years’ experience with Splunk Enterprise Security, CrowdStrike Falcon, and/or Microsoft Sentinel Ability to explain simple hardening methods for network and process detections. Familiarity with common endpoint security best practices. Demonstrated knowledge of incident response concepts and procedures. Must have an advanced understanding of, and ability to communicate, security technologies that can be used to mitigate cyber risks. Understanding of common network services and attacks against them. Previous experience in technical support or security-focused role. Willing and able to work Sunday - Thursday 12:00am - 10:30am ET. Must be authorized to work within the United States. Stand out With You may stand out if you have experience with: Experience in a Managed Services Analyst role. At least one relevant industry certification (Security+, Network+, CYSA+). Hands-on experience executing containment or response actions (e.g., host isolation, process termination, indicator blocking) within an EDR/XDR platform such as CrowdStrike Falcon or Microsoft Defender. Familiarity with detection tuning concepts (e.g., false-positive reduction, alert fidelity, rule logic) sufficient to identify and flag noisy or broken detections. Strong written communication skills, with the ability to document technical findings clearly and accurately for escalation, hand-off, and client-facing use. Why nuHarbor? At nuHarbor, you'll find more than a job - you'll find a team committed to helping each other grow, solve meaningful problems, and make a measurable impact. You can expect: A collaborative, high-performing team environment Leaders who are invested in your success and development Meaningful work that helps organizations protect critical services and missions The encouragement to bring your authentic self to work every day Competitive pay, performance-based bonus opportunities, generous paid time off, and comprehensive benefits Compensation This position has an anticipated base salary range of $90,000–$116,000 annually and is eligible for a shift premium. Plus, this position is eligible for nuHarbor's annual bonus program with a target opportunity of 10%. Actual compensation is based on factors including experience, skills, certifications, and geographic location. Join Us At nuHarbor, we believe great security starts with great people. We're looking for curious problem-solvers, trusted advisors, and continuous learners who are passionate about helping clients win. If you're ready to make an impact while growing alongside a team that values people as much as technology, we'd love to hear from you. AAP/EEO Statement The Equal Employment Opportunity Policy of nuHarbor is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. nuHarbor hires and promotes individuals solely based on their qualifications for the job to be filled. nuHarbor believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.

Requirements

Must-haves

Cybersecurity for the public good.
Sunday - Wednesday 12:00am - 10:30am ET (4 days x 10 hours)
Live by the nuHarbor values: Help Clients Win, Always Improve, Protect the House.
Analyze security alerts, events, and trends, and effectively communicate the value of NuHarbor services to clients.
Perform alert triage, classification, disposition, and escalation within SLA requirements.
Execute containment and response actions (e.g., host isolation, process termination, indicator blocking) on client endpoints and in-scope tooling, in accordance with documented client rules of engagement.
Document each ticket with a clear evidence trail, investigative reasoning, and disposition rationale, to a standard that supports escalation or client delivery without requiring rework.
Operate within the scope of SIEM, MDR, mXDR, and operational incident response tooling in accordance with documented rules of engagement.
Identify security gaps and mitigations in client environments and communicate them to internal teams and clients as directed.
Communicate effectively and clearly with internal support teams and nuHarbor clients.
Participate in client meetings on security operations as scheduled.
Demonstrate a team-first mindset, operating independently on assigned work and proactively supporting operations regardless of whether a manager is actively present.
Generate reports to nuHarbor standards and schedules.
Develop, implement, and improve documentation.
Identify and scope opportunities for process improvements.
Flag noisy, low-fidelity, or broken detections to a Senior Analyst or Detection Engineering for review.
Your Foundation
We're looking for someone who brings these minimum qualifications:
Bachelor’s Degree in a related field
In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
A minimum of two (2) years’ experience with Splunk Enterprise Security, CrowdStrike Falcon, and/or Microsoft Sentinel
Ability to explain simple hardening methods for network and process detections.
Familiarity with common endpoint security best practices.
Demonstrated knowledge of incident response concepts and procedures.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Paid Time Off