Monitor and analyze SIEM alerts, respond to security incidents and client tickets, troubleshoot vulnerabilities and malware, and provide recommendations to strengthen client security postures. Maintain application, web, and infrastructure security controls; collaborate with clients, vendors, and IT professionals; monitor vulnerability intelligence; and produce technical status reports and contract deliverables.
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. Our unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments and enables customers to focus on growth, innovation, and business outcomes, while assuring that their security infrastructure is resilient and adaptive to evolving threats. That’s why customers trust Avertium to deliver better security, improved compliance, and greater ROI.
The CyberSecurity Analyst is a trusted technical advisor working with an active Center of Excellence. The CS Analyst works closely with the client to provide proactive support assistance to reduce or prevent security issues from occurring on the client network. The CS Analyst will administer and maintain security measures focused on application, web and infrastructure security for the client. The CS Analyst is responsible for working with key client contacts at multiple levels of the organization to identify and align business and IT Security objectives. The CS Analyst will provide security analytics and assistance with security support requests.
Responsibilities:
- Monitor, respond to, and analyze SIEM alerts from monitoring tools.
- Provide technical guidance / recommendations to clients to enhance their overall security posture within the managed products. Handles daily incidents; monitors, tracks, analyzes and records.
- Work with vendors, outside consultants, and other third parties to improve information security within the organization.
- Responds to security related tickets escalated from clients, and works collaboratively with the client to assist in resolving security events.
- Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware.
- Monitor security vulnerability information from vendors and third parties.
- Create Weekly and Monthly Status Reports, including daily technical task reports and contract deliverables.
Qualifications for Success:
- Strong written, verbal and non-verbal communication skills, especially conveying complex information in an understandable manner.
- CISSP, CISA or GIAC certification is a plus.
- A minimum of 2-4 years of experience working with Microsoft Active Directory.
- Experience in managing an organization's PCI, HIPAA, or SSAE16 certification is preferred.
- Analyze and resolve complex technical and business problems.
- Must have proficient knowledge with three or more of the following technologies: Application / stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF); Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations; Wireless Networking; UNIX, AIX & Solaris, Linux, Windows Server Operating Systems; Endpoint and Malware
- Knowledge with NIST, FISMA, DIACAP.
- Knowledge of Windows 2003-12 server platforms.
- Knowledge of VMware and VM server platforms.
- Knowledge of UNIX server platforms.
- Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, Windows.
- Web and mail logged events.
- Ability to analyze IANA assigned ports (well known, registered, dynamic and private ports).
- Ability to troubleshoot common network devices, network, vulnerabilities and network attack patterns.
- Ability to troubleshoot Windows Event IDs.
- Interact with all levels of management.
- Make decisions based on many variables.
- Manage multiple tasks/projects simultaneously.
- Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 4 years of experience.
- Advanced network and systems certifications such as CCNP, CCNA and CISSP, are preferred.
- Other industry certifications such as ITIL, Microsoft, Juniper and Checkpoint are a plus.
- #LI-CS1
In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.
Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.
Similar Jobs
Aerospace • Information Technology • Professional Services • Security • Software
Investigates and responds to cybersecurity incidents, security alerts, suspicious activity, and threats across enterprise cloud, endpoint, identity, email, and collaboration environments. Uses Microsoft Defender, Purview, Sentinel, IDS, firewalls, and other monitoring tools for threat detection, incident response, risk assessment, compliance, and security operations. Maintains access controls, policies, procedures, and security requirements; conducts audits and investigations; recommends corrective actions; and improves detection and response capabilities.
Top Skills:
Cis ControlsCmmcData Lifecycle ManagementData Loss Prevention (Dlp)Endpoint ProtectionFedrampFirewallsIdentity Access Management (Iam)Information ProtectionInsider Risk ManagementIntrusion Detection Systems (Ids)Iso 27001Microsoft Defender For Cloud AppsMicrosoft Defender For EndpointMicrosoft Defender For IdentityMicrosoft Defender For Office 365Microsoft Defender XdrMicrosoft PurviewMicrosoft SentinelNetwork Traffic LogsNistRmfSecurity Information And Event Management (Siem)Security MonitoringSecurity Orchestration Automation And Response (Soar)Sensitivity Labels
Financial Services
Supports governance, risk, and compliance programs across Bertram Capital and its portfolio companies. Maintains NIST CSF profiles, policies, risk registers, control mappings, security baselines, and vendor due diligence processes. Coordinates SOC 2 readiness and audits, collects and validates evidence, tracks remediation, and manages recurring control activities. Communicates requirements to technical and business stakeholders, reports compliance status, and supports incident documentation and investor security questionnaires.
Top Skills:
Aicpa Trust Services CriteriaAWSAzureCis ControlsDrataGCPGoogle SheetsGoogle WorkspaceIso/Iec 27001JIRAMicrosoft 365ExcelMonday.ComNist Csf 2.0Nist Sp 800-53Soc 2Vanta
Other
Supports daily cybersecurity operations across cloud, identity, email, data, and endpoint environments. Monitors and investigates alerts, incidents, vulnerabilities, and suspicious activity; administers Microsoft security platforms; supports identity, email, cloud security, and access-control policies; coordinates remediation; maintains baselines, procedures, dashboards, and audit evidence; and contributes to incident response, risk assessments, control testing, and security improvements.
Top Skills:
Active DirectoryAzure PolicyCis BenchmarksCis ControlsConditional AccessDefender For CloudHipaaHitrustIso 27001/27002KerberosKqlmacOSMfaAzureMicrosoft DefenderMicrosoft Entra IdMicrosoft PurviewMicrosoft Security BaselinesMicrosoft SentinelNetskopeNist CsfOauthPrivileged Identity Management (Pim)ProofpointSAMLSoc 2Tenable Cloud SecurityWindows
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
