Role Overview
The Information Security Analyst will support our IT/security team in protecting staff, volunteers, and client data across our nonprofit’s systems and cloud services.
Key Responsibilities
- Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations.
- Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures.
- Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities.
- Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions.
- Assist with managing Cloudflare security, including reviewing DNS and bot protection events.
- Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices.
- Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization.
- Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff.
- Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts.
- Assist in documenting security procedures, checklists, and “how-to” guides designed for non-technical staff and volunteers.
- Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organization’s needs.
- Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities.
- Correlate logs and security events from multiple data sources, including firewalls, IDS/IPS, web servers, endpoints, and cloud platforms, to identify indicators of compromise.
- Leverage threat intelligence, including Indicators of Compromise (IOCs) and adversary TTPs, to enhance detection capabilities and strengthen security monitoring.
- Document investigations, incident findings, response actions, and lessons learned to support continuous improvement of security operations and response processes.
- Produce security metrics, reports, and operational summaries that communicate threat trends, incident activity, and program effectiveness to stakeholders.
- Collaborate closely with Security Operations, IT, and other cross-functional teams to ensure a coordinated and effective approach to threat detection and incident response.
- Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices to continuously improve monitoring and detection capabilities.
- Other job-related duties as assigned.
Skills & Competencies
- Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege.
- Knowledge of Microsoft 365 and fundamental cloud concepts.
- Strong communication skills and patience when working with non-technical staff in a mission-driven environment.
- Proven reliability, confidentiality, and integrity in managing sensitive information.
Qualifications
- Associate's or bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps.
- 1-2 years experience in IT, Cybersecurity or other related roles.
- Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password.
Compensation & Other Information
- Location: Remote in the United States
- Pay Rate: Based on a variety of factors in accordance with applicable law including the successful candidate’s relevant experience, skills, knowledge, and experience.
- Reports To: IT Operations/Security Architect
Circular Action Alliance is an equal employment opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex (including pregnancy, childbirth, lactation, and related medical conditions), national origin, military or veteran status, sexual orientation, gender identity, age or any other category protected by applicable federal, state, or local law. If you require accommodation as part of the application process, please contact careers@circularaction.org.
