Cyber Security Analyst (1LoD)

Kforce's client, a well-established financial services organization in the Greater Boston area, is seeking a Cyber Security Analyst to join its First Line of Defense (1LoD) cybersecurity team. This individual will work alongside a senior cybersecurity specialist and play a key role in identifying, analyzing, and mitigating cyber threats across the enterprise. The ideal candidate is passionate about threat hunting, cybersecurity operations, and proactive threat detection. This position will focus on analyzing security telemetry across endpoint, network, email, and cloud environments to identify suspicious activity, uncover emerging threats, and strengthen the organization's overall security posture. Summary: Responsibilities include conducting threat hunting activities, investigating security alerts, analyzing indicators of compromise (IOCs), developing detection content, and supporting incident response efforts. The Analyst will leverage data from SIEM, EDR, and other security tools to identify anomalies and potential risks. This role will also partner with internal stakeholders to improve monitoring capabilities, support vulnerability management initiatives, and contribute to the development of threat hunting methodologies and playbooks. This is an excellent opportunity for a cybersecurity professional who enjoys investigative work, continuous learning, and working in a collaborative environment focused on protecting critical business systems and data.

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related discipline
• 3+ years of experience in Cyber Security Operations, Threat Hunting, Security Monitoring, SOC Analysis, or Threat Intelligence
• Strong understanding of cybersecurity frameworks and threat analysis methodologies, including MITRE ATT&CK and cyber kill chain models
• Experience investigating security events and identifying indicators of compromise (IOCs), attacker behaviors, and threat patterns
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, QRadar, Splunk, or similar technologies
• Experience working with Endpoint Detection and Response (EDR) tools such as CrowdStrike Falcon, Microsoft Defender, or comparable solutions
• Experience supporting email security, phishing analysis, and messaging protection platforms
• Ability to analyze large datasets, network traffic, endpoint telemetry, logs, and security events to identify anomalies and potential threats
• Familiarity with vulnerability management practices and security remediation processes
• Working knowledge of scripting or automation tools such as Python and/or PowerShell
• Strong analytical, investigative, problem-solving, and communication skills
• Ability to communicate technical findings to both technical and non-technical audiences

• CompTIA Security+
• CompTIA CySA+
• GIAC Security Essentials (GSEC)
• Certified SOC Analyst (CSA)
• Microsoft SC-200 Security Operations Analyst Associate