Cybersecurity Operations Analyst

Description

The company makes meat snacks through a global group of brands and was founded four decades ago in Wisconsin's North Woods. The global IT group is hiring a Cybersecurity Operations Analyst to be the first responder to security events.

You will watch for, sort, look into and act on security alerts across a spread-out technology estate. You will spot suspicious activity quickly and help with containment, repair and recovery.

The role calls for careful analysis, close attention to detail, and hands-on work with security tools, ticketing systems and operational support processes. Beyond alert handling and incident response, you will help with vulnerability management, cybersecurity helpdesk tickets and end-user security support. You will also work with infrastructure, network, application, OT and outside security providers.

Responsibilities

• Triage and investigate alerts from SIEM, EDR, MDR, cloud security, identity, email security and other enterprise platforms, then act on them.
• Help run the Microsoft Sentinel SIEM setup, including Data Collection Rules, data collectors, data sources, alert logic and related components.
• Maintain MDR, EDR, antivirus and other tools covering cloud, endpoints and network security.
• Handle incidents from start to finish: gather evidence, scope the event early, coordinate containment, track fixes, escalate, document and follow up afterward.
• Find gaps in the environment and suggest changes to incident response playbooks, policies and procedures.
• Write incident reports and brief business stakeholders on impact, actions taken, fix status and lessons learned.
• Improve SIEM log intake by judging how useful each data source is, cutting noise, widening visibility and keeping collection cost-effective.
• Support vulnerability management: review scans, confirm findings, rank fixes, track exceptions and coordinate remediation with infrastructure, application, network and OT teams.
• Answer cybersecurity helpdesk requests, such as suspected phishing, endpoint problems, access questions, policy queries and secure setup advice.
• Work with MDR providers, IT teams and business stakeholders to confirm alerts, clarify impact, coordinate response and resolve security events on time.
• Help manage third-party risk by reviewing vendor security information, supporting risk assessments, tracking vendor fixes and following up with vendors and internal staff.
• Teach team members practical habits for spotting phishing and suspicious activity, using access safely and handling technology securely.
• You may also be asked to handle additional tasks.

Requirements

• Bachelor's degree in cybersecurity, IT or a related field, or equivalent professional experience.
• 2+ years of hands-on work in security operations, security monitoring, incident response, vulnerability management, IT support or similar technical operations.
• A solid base in alert triage, incident response, endpoint and identity security, phishing analysis and supporting vulnerability fixes.
• Able to work in ticket queues, security dashboards, endpoint software and identity products, and to use basic scripting or query languages to probe and log issues.
• Hands-on use of Microsoft Defender, Microsoft Sentinel, Microsoft 365 security tools, Active Directory, Entra ID, Phosphorus, Tenable Nessus or comparable enterprise security products.
• Skill reading logs, alerts, indicators of compromise, user activity, endpoint telemetry, email events and vulnerability findings to make timely security calls.
• A proven record of investigating alerts, documenting results, escalating risks and supporting incident response promptly and accurately.
• Familiar with vulnerability work, endpoint and identity security, phishing response and access control across standard enterprise tools.
• Able to manage cybersecurity support tickets, report status clearly and coordinate fixes across technical teams.
• Experience with frameworks and standards such as ISO 27001, NIST and SOC2.
• Able to work with security service providers, IT teams, vendors and end users during investigations and support requests.
• Solid grasp of security principles, risk management, encryption, authentication and access control.
• In-depth knowledge of network and infrastructure security, covering virtualization, wireless and email systems.
• Familiar with SIEM platforms, automated penetration testing tools and cloud risk assessment methods.
• Knowledge of security design, technical governance and third-party audit practices.
• Can make hard technical matters understood by technical and non-technical people alike.
• Discreet with sensitive and confidential information.
• Adaptable, good at managing time, and able to solve problems independently.
• Stays composed under pressure and provides after-hours support when necessary.
• Open to up to 10% travel, covering training and work-related business.
• Preferred: experience with platforms such as Microsoft Sentinel, Microsoft Defender, Tenable Nessus, BeyondTrust, Palo Alto, Cisco, phishing analysis tools or other cybersecurity operations technology.
• Preferred: experience handling incidents from identification through containment, remediation, documentation and closure.
• Preferred: certifications such as CompTIA Security+, CompTIA CySA+, Microsoft Security, or equivalent practical experience.
• Preferred: experience securing OT or industrial networks in manufacturing or consumer packaged goods settings.
• Preferred: familiarity with Power BI, Fabric or similar tools for security data analysis and reporting.

Conditions

Base pay starts at $80,000.00 - $110,000.00. Final pay depends on factors such as market data, internal equity, location, and skills and experience.

Work is mostly in a climate-controlled office, within a plant/office site where temperatures and noise vary and there is exposure to moving manufacturing equipment and wet or slippery floors.

Travel may be required.

Physical demands: regular sitting, use of hands for fingering, handling and feeling, and talking and hearing; occasional standing, walking and reaching; occasional lifting up to 25 pounds; close vision. Reasonable accommodations are available for people with disabilities.

Equal opportunity employer: applicants are considered regardless of age, race, citizenship status, disability, sex, sexual orientation, veteran status or other characteristics protected by federal, state or local law.

Benefits

• Annual incentive and program-specific awards may apply on top of base pay.
• Medical, dental and vision coverage.
• Insurance covering life and disability.
• 401k participation.
• Holiday pay and paid time off.