Cybersecurity Operations Analyst

Link Snacks is seeking a Cybersecurity Operations Analyst to join our Global IT organization. This role is responsible for monitoring, triaging, investigating, and responding to cybersecurity alerts across our distributed technological environments. The Cybersecurity Operations Analyst will serve as a frontline responder for security events, helping protect the organization by rapidly identifying suspicious activity and supporting containment, remediation, and recovery efforts.

This position requires strong analytical skills, attention to detail, and hands-on experience working with security tools, ticketing systems, and operational support processes. In addition to incident response and alert handling, the role will support vulnerability management activities and assist with cybersecurity-related helpdesk tickets, end-user security support, and coordination with infrastructure, network, application, OT, and external security service providers.

KEY RESPONSIBILITIES

• Monitor, triage, investigate, and respond to cybersecurity alerts generated by SIEM, EDR, MDR, cloud security, identity, email security, and other enterprise security platforms. • Support the security operations environment, including Microsoft Sentinel SIEM, Data Collection Rules, data collectors, data sources, alert logic, and related operational components. • Support and maintain MDR, EDR, AV and other security tools across cloud, endpoint, and network security. • Perform incident response activities, including evidence gathering, initial scoping, containment coordination, remediation tracking, escalation, documentation, and post-incident follow-up. • Identify security gaps in the environment and recommend improvements to the organizational incident response process (playbooks, policies, procedures, etc.). • Create security incident reports and present them to business stakeholders to communicate business impact, response actions, remediation status, and lessons learned. • Optimize SIEM log ingestion by reviewing data source value, reducing unnecessary noise, improving visibility, and supporting cost-effective collection strategies. • Support vulnerability management processes by reviewing scan results, validating findings, prioritizing remediation, tracking exceptions, and coordinating remediation with infrastructure, application, network, and OT teams. • Respond to cybersecurity-related helpdesk tickets and support requests, including suspected phishing, endpoint security issues, access concerns, policy questions, and secure configuration guidance. • Partner with managed detection and response providers, internal IT teams, and business stakeholders to validate alerts, clarify impact, coordinate response actions, and ensure timely resolution of security events. • Support third-party risk management by reviewing vendor security information, assisting with risk assessments, tracking remediation items, and coordinating cybersecurity follow-up with vendors and internal stakeholders. • Support security awareness and user education by providing practical guidance to Team Members on phishing, suspicious activity, secure access, and safe technology use. • Perform other duties as assigned.