Junior Cybersecurity Operations Analyst

Overview

A Boston-area organization is looking for a Cybersecurity Analyst to join its team on a contract basis. In this role, you will help keep daily security operations running smoothly across a complex enterprise setup. The position centers on identity and access management, vulnerability remediation, operational security support, and incident response work.

The right candidate will bring hands-on technical troubleshooting ability, a service-oriented mindset, and the comfort of partnering with multiple security tools and cross-functional business teams to help maintain a secure, compliant environment.

What you'll do

• Handle day-to-day cybersecurity operations and fulfill security service requests across the business.
• Examine, troubleshoot, and close security tickets, access requests, and account-related issues.
• Support identity and access management processes such as provisioning accounts, reviewing access, validating roles, and assisting governance efforts.
• Track vulnerability management work by assessing findings, ranking remediation priorities, and coordinating with technical stakeholders.
• Contribute to incident response efforts through investigation, documentation, escalation, and resolution support.
• Keep operational records, audit evidence, and process documentation accurate and up to date.
• Work with infrastructure, application, and compliance teams to improve security controls and operational workflows.
• Assist with email security, phishing prevention, and related security operations tasks.
• Look for opportunities to streamline processes, introduce automation, and improve efficiency.
• Follow established security policies, standards, and regulatory obligations.

Required background

This role calls for at least 2 years of experience in cybersecurity, information security operations, security administration, IT support, or a similar technical field. You should have experience supporting enterprise identity and access management, familiarity with vulnerability tracking and remediation, and prior use of IT service management or ticketing systems.

Strong experience with Microsoft Defender is required, along with a solid understanding of access control, vulnerability management, phishing protection, and incident response. The role also requires strong analytical, organizational, and problem-solving abilities, plus clear communication and the ability to work well with both technical and non-technical partners.

Preferred experience

Experience in highly regulated environments is a plus. Additional value would come from familiarity with cloud identity platforms, modern authentication methods, email security tools, and Microsoft 365 security features. Security+ or similar certifications are preferred but not mandatory. Experience with Rapid7 is also desirable.

Employment details

This is a contract position based onsite in the Greater Boston area.

No salary, stipend, start date, or application deadline was specified in the source information.