Cyber Security Analyst

At Easterseals PORT Health (ESPH), our mission is rooted in empowering individuals and strengthening communities. We are looking for a dynamic, enthusiastic and organized Cybersecurity Analyst to join our IT department in Raleigh.  This full-time opportunity offers a competitive salary and comprehensive benefit package.  Come join our team and be part of the Easterseals PORT Health family!

The Cybersecurity Analyst is responsible for supporting the agency's cybersecurity program through security monitoring, incident response, vulnerability management, and compliance activities. This position helps protect the agency's systems, networks, and data by identifying security risks, assisting with remediation efforts, and promoting cybersecurity best practices throughout the organization.

• Monitor security alerts, events, and system activity to identify potential cybersecurity threats and vulnerabilities.
• Investigate suspected security incidents and support response, containment, remediation, and recovery activities.
• Document security incidents, findings, and corrective actions in accordance with organizational procedures.
• Escalate significant security risks and incidents to leadership as needed.

• Assist in the implementation, maintenance, and monitoring of cybersecurity controls and technologies.
• Monitor systems for indicators of intrusion, compromise, or other suspicious activity.
• Support the remediation of network, system, and application vulnerabilities.
• Participate in change management activities to help ensure security requirements are appropriately addressed.

• Assist with security audits, compliance reviews, and regulatory reporting activities.
• Review security scan results and coordinate remediation efforts with IT staff.
• Support access management, security monitoring, and other administrative security functions.
• Maintain cybersecurity documentation, procedures, and records.

• Support cybersecurity awareness and training initiatives for employees and contractors.
• Promote security best practices related to phishing, password management, data protection, and acceptable use.
• Collaborate with IT staff, vendors, and other stakeholders to support cybersecurity objectives.
• Perform other duties as assigned.

• Associates’ degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience
• Minimum of one (1) year of experience in cybersecurity, information security, or a related information technology role
• Relevant cybersecurity certification preferred such as CompTIA Security+, CySA+, SSCP, or equivalent preferred
• Experience with security monitoring, email protection platforms, incident response, vulnerability management, identity and access management (IAM), or related cybersecurity compliance activities
• Knowledge of cybersecurity principles, industry standards, and security best practices
• Strong analytical, problem-solving, and communication skills
• Ability to manage multiple priorities in a fast-paced environment
• Valid unrestricted North Carolina driver’s license, reliable transportation, and current vehicle insurance

Essential physical requirements: To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The qualifications listed above are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

• Must possess the ability to analyze, review, and document technical information with attention to detail and accuracy.
• Ability to communicate effectively with internal and external stakeholders.
• Ability to remain in a stationary position for extended periods while working on a computer and monitoring systems.
• Ability to operate a computer, keyboard, telephone, and other standard office equipment.

Environment:  

• Position may be performed in an office, remote, or hybrid work environment, depending on organizational needs and approved work arrangements.
• Requires frequent use of computers, telephones, cybersecurity monitoring tools, and other technology systems.
• May require occasional after-hours work to support security incidents, system updates, audits, or other business needs.