Cybersecurity Operations Analyst

Spaulding Ridge is an advisory and IT implementation firm. We help global organizations get financial clarity into the complex, daily sales, and operational decisions that impact profitable revenue generations, efficient operational performance, and reliable financial management. At Spaulding Ridge, we believe all business is personal. Core to our values is our relationships with our clients, our business partners, our team, and the global community. Our employees dedicate their time to helping our clients transform their business, from strategy through implementation and business transformation. What You Will Do and Learn: The Cybersecurity Operations Analyst will support the Cybersecurity Manager in maintaining and improving Spaulding Ridge's security posture. This entry-level role is ideal for someone looking to develop a career in cybersecurity while gaining hands-on experience across security operations, vulnerability management, identity and access management, cloud security, and compliance. The analyst will assist in monitoring security events, responding to security alerts, supporting security projects, and maintaining security documentation while learning from senior members of the Technology & Security team. Security Operations Monitor and analyze security alerts from SIEM, EDR, Firewall, WAF, IDS/IPS, email security, and cloud security platforms. Conduct and Support threat hunting and detection of tuning activities. Monitors open-source and proprietary threat intelligence feeds daily to research threat actor tactics, techniques, and procedures (TTPs). Support the investigation and triage of security alerts and incidents under the guidance of the Cybersecurity Manager. Assist with incident response activities, including documentation, evidence collection, and follow-up actions. Help maintain security playbooks and operational procedures. Vulnerability Management Assist with vulnerability scanning across endpoints, servers, and cloud environments. Track remediation activities and follow up with system owners. Help prepare vulnerability reports and dashboards. Support penetration testing and remediation validation. Identity & Access Management Support user provisioning, deprovisioning, and access reviews. Assist with periodic access recertification activities. Help maintain least-privilege and role-based access controls. Support MFA, Conditional Access, SSO, and Privileged Access Management. Cloud & Infrastructure Security Assist with security reviews of Microsoft 365, Azure, and other cloud platforms. Support implementation of security best practices and configuration reviews. Help monitor cloud security recommendations and remediation activities. Monitor Azure, Microsoft 365, AWS, and SaaS platform security posture and Assist with Zero Trust security initiatives. Security Governance & Compliance Support ISO 27001 activities, including policy reviews, evidence collection, internal audits, and corrective actions. Assist with third-party security assessments and vendor reviews. Help maintain security documentation and records. Security Awareness Support security awareness campaigns and phishing simulations. Assist in developing security communications and training materials. Help answer security-related questions from employees. Security Tool Administration Assist with the administration, maintenance, and integration of security tools. Support security monitoring improvements and automation initiatives. Help troubleshoot issues related to security technologies. Education and Work Experience Requirements: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience). 1-2 years of experience in cybersecurity, systems administration, cloud administration, or related technical roles. Good to have: Knowledge of security frameworks and best practices, including ISO 27001, NIST Cybersecurity Framework (CSF), and CIS Controls. One or more of the following certificat…