[Hiring] Cybersecurity Analyst @KLDiscovery

Role Description

The Cybersecurity Analyst is a hands-on operational role within the Cyber Operations team, responsible for frontline security monitoring, incident response support, exposure management validation, and compliance evidence. This is a remote opportunity with a clear growth path toward Sr. Cybersecurity Analyst.

Key Responsibilities

• Security Monitoring & Alert Triage
  • Serve as first-line eyes on the environment validating and escalating CrowdStrike MDR-confirmed findings.
  • Monitor security alerts from tools operating outside MDR scope.
  • Triage alerts for AI tool misuse, anomalous AI-related activity, and other emerging threat patterns.
  • Flag SIEM and identity health monitoring gaps, anomalies, and coverage issues to the engineering team.
• Incident Response Support
  • Serve as first-line support during security incidents, gathering evidence, documenting timelines, and executing containment steps.
  • Conduct initial technical investigations to identify root cause of intrusions, anomalies, or policy violations.
  • Maintain incident records, post-incident documentation, and lessons-learned notes.
  • Participate in on-call rotation for escalated MDR findings or active incidents.
• Vulnerability & Exposure Management Support
  • Monitor the CrowdStrike Falcon Exposure Management dashboard tracking open findings.
  • Follow up on patch deployment failures identifying affected systems and coordinating with IT on remediation timelines.
  • Support third-party penetration test logistics, internal scheduling communication, evidence gathering, and remediation ticket tracking.
  • Maintain accurate and current exposure tracking records.
• Compliance & Audit Support
  • Gather and maintain technical evidence for compliance frameworks and internal audits.
  • Support internal audit and pre-assessment readiness reviews.
  • Assist the GRC team with technical control evidence, gap tracking, and remediation documentation.
  • Maintain documentation that supports annual security compliance attestations.

Qualifications

• 2+ years of hands-on experience in a security operation, IT, or closely related technical role.
• Practical experience with security monitoring, alert triage, or incident response in a corporate environment.
• Familiarity with MDR platforms (CrowdStrike Falcon Complete or equivalent) is a strong plus.
• Working knowledge of common security tools or ticketing systems (Remedy or equivalent).

Requirements

• Understanding of core security domains sufficient to execute assigned tasks independently: access management, encryption, network security, vulnerability management, and incident response.
• Basic familiarity with cloud security concepts (AWS, Azure, or GCP) including IAM, logging, and posture monitoring.
• Foundational understanding of AppSec concepts: SAST/DAST tooling, secure SDLC, and pipeline security.
• Experience with AI security considerations is a plus.

Benefits

• Formal education in Information Security, Computer Science, IT, or a related field is a plus but not required.
• Relevant certifications such as GSEC or CISSP are valued but not a prerequisite.