The Job/What You’ll Do:
The Cybersecurity Analyst is responsible for monitoring, analyzing, and responding to security incidents and threats, implementing security controls, assisting with security and risk audits and assessments, and contributing to the development and execution of security strategies and policies.
Responsibilities:
Analyze security alerts and incidents to determine the root cause, scope, and potential impact, and take appropriate action to contain, mitigate, and remediate identified threats.
Administer the security awareness program, including phishing simulations, employee training, and the investigation of reported phishing threats.
Participate in security assessments and penetration testing; document identified vulnerabilities and assist with remediation activities.
Maintain and update the Risk Register and POA&M, including tracking identified risks, remediation activities, and status updates as part of the organization’s established risk management program.
Develop and implement security controls and countermeasures to mitigate identified risks.
Support the vulnerability management program by identifying, prioritizing, tracking, and reporting vulnerabilities and remediation activities in accordance with established mean time to remediate (MTTR) standards.
Assist with third-party risk management activities, including vendor onboarding assessments and periodic risk reviews.
Assist with the development, review, and maintenance of cybersecurity policies and procedures aligned with NIST and other applicable security standards and regulatory requirements.
Participate in the evaluation and deployment of new security technologies and solutions
Stay abreast of emerging cyber threats, vulnerabilities, and security technologies through continuous research and learning.
All other duties as assigned.
Knowledge, Skills, Abilities:
Experience using security technologies and tools such as SIEM, IDS/IPS, DLP (Data Loss Prevention), Vulnerability Management, and EDR (Endpoint Detection and Response).
Experience participating in security assessments, penetration testing.
Proficiency in incident response processes and tools.
Basic understanding of security compliance frameworks (e.g., NIST 800-53, ISO 27001) and regulatory requirements (e.g., HIPAA, SOC2, StateRAMP, HITRUST).
Collaboration abilities to cooperate with team members, verbal communication skills including presentation skills, and the ability to communicate with a diverse spectrum of technical and non-technical team members and other relevant parties.
Capacity to multitask and prioritize workload.
Ability to act professionally and maintains appropriate boundaries with clients and staff.
Ability to report as scheduled to work, meetings, training, and job-related activities prepared and as scheduled.
Ability to consistently demonstrate compassion and meet people with compassion; Effort, every interaction deserves my best effort; and Ownership, which drives the company's success.
Maintains an open and accepting mindset by being an active learner, participating in discussions with others, trying new approaches and ideas, and being self-aware and self-reflective for continual personal, professional and leadership growth.
Education & Experience:
2-5 years of experience in field, Required
CompTIA Security+, Microsoft Security Operations Analyst, Microsoft Azure Security Engineer, ISC2, GSEC, CySA+ Certification, Preferred
Bachelors Degree in IT/Security or related field, Required
The candidate's applicable education and experience will determine where a candidate falls in the position range. Pay Range $75,000 — $88,250 USD Working Conditions:
While performing the job duties in the office or at a home office, the employee is frequently required to stand, walk, sit, and use hands; they must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. Exposure to noise typical with office operations. Ability to hear and speak. Employees must maintain a stable and secure private home internet with a minimum of 50Mbps download and 5Mbps upload, and an average jitter less than 20% of latency. speed.cloudflare.com
Who We Are & What We Offer:
Solari is an award-winning nonprofit that operates a 24/7 crisis line serving statewide in Arizona, Oklahoma and Colorado. Our mission is to Inspire Hope through our talented and compassionate staff.
Since 2007, Solari has been providing crisis contact center services and in that short time has helped thousands of individuals and families connect to the help they need. Additionally, in that short timeframe, Solari has grown to expand services to a peer-run Warm Line, Serious Mental Illness (SMI) determinations, mobile team dispatches, crisis transportation services, emergency room-based assessments, Department of Child Safety (DCS) rapid response and crisis stabilization services, telephone follow-up to those who need it, tragedy support lines and other in-kind services to the community.
Friendly work environment
Generous paid time off (PTO)
Health benefits (Medical/Dental/Vision) that start the first of the month following the hire date
Competitive compensation
Convenient office locations and Hybrid Schedule
On-site fitness room free to all employees (Tempe Office)
Basic Life Insurance
Voluntary Life, Spouse, Child Insurance
Critical Illness w/free dependents
Critical Illness Spouse
Short Term & Long Term Disability- Starts first of the month after 90 days of employment
401K & 401K Roth - Starts first of the month after 90 days of employment
United Pet Care
LifeLock for identity theft
LYRA EAP Program- 25 free sessions for mental health per family member
Solari is proud to be an equal opportunity employer and does not unlawfully discriminate against any employee or applicant for employee per applicable federal, state, and local laws. At Solari, a diverse mix of highly talented, innovative, and dedicated people come together to make a lifetime impact on each of our Client's lives. All qualified applicants will receive equal consideration for employment.
We are focused on equality and believe deeply in diversity of race, color, ancestry, age, veteran status, marital status, creed, religion, sex, gender, gender identity, sexual orientation, ethnicity, national origin, and other legally protected group status.
Requirements
Must-haves
Analyze security alerts and incidents to determine the root cause, scope, and potential impact, and take appropriate action to contain, mitigate, and remediate identified threats.
Administer the security awareness program, including phishing simulations, employee training, and the investigation of reported phishing threats.
Participate in security assessments and penetration testing; document identified vulnerabilities and assist with remediation activities.
Maintain and update the Risk Register and POA&M, including tracking identified risks, remediation activities, and status updates as part of the organization’s established risk management program.
Develop and implement security controls and countermeasures to mitigate identified risks.
Support the vulnerability management program by identifying, prioritizing, tracking, and reporting vulnerabilities and remediation activities in accordance with established mean time to remediate (MTTR) standards.
Assist with third-party risk management activities, including vendor onboarding assessments and periodic risk reviews.
Assist with the development, review, and maintenance of cybersecurity policies and procedures aligned with NIST and other applicable security standards and regulatory requirements.
Participate in the evaluation and deployment of new security technologies and solutions
Stay abreast of emerging cyber threats, vulnerabilities, and security technologies through continuous research and learning.
All other duties as assigned.
Experience using security technologies and tools such as SIEM, IDS/IPS, DLP (Data Loss Prevention), Vulnerability Management, and EDR (Endpoint Detection and Response).
Experience participating in security assessments, penetration testing.
Proficiency in incident response processes and tools.
Basic understanding of security compliance frameworks (e.g., NIST 800-53, ISO 27001) and regulatory requirements (e.g., HIPAA, SOC2, StateRAMP, HITRUST).
Capacity to multitask and prioritize workload.
Ability to act professionally and maintains appropriate boundaries with clients and staff.
Ability to report as scheduled to work, meetings, training, and job-related activities prepared and as scheduled.
Ability to consistently demonstrate compassion and meet people with compassion; Effort, every interaction deserves my best effort; and Ownership, which drives the company's success.
2-5 years of experience in field, Required
Bachelors Degree in IT/Security or related field, Required
Solari is an award-winning nonprofit that operates a 24/7 crisis line serving statewide in Arizona, Oklahoma and Colorado. Our mission is to Inspire Hope through our talented and compassionate staff.
Friendly work environment
Nice-to-haves
CompTIA Security+, Microsoft Security Operations Analyst, Microsoft Azure Security Engineer, ISC2, GSEC, CySA+ Certification, Preferred
Application prep
Use the role’s language and application details while tailoring your materials.