Associate Analyst, Cyber Security

Fully Remote • OSC Utah - Salt Lake City, UT 84111

The Associate Analyst, Cybersecurity is an entry-level security role for a motivated individual with an IT foundation who is actively building security knowledge. Working under close direction of the Senior Analyst and Director of Information Security, this person executes day-to-day security tasks accurately, escalates early, documents thoroughly, and grows steadily toward Analyst I proficiency.

Security Monitoring & Incident Response

• Learn to monitor security alerts using Cato and Checkpoint alongside the Senior Analyst, building triage judgment before working independently.

• Under Senior Analyst guidance, document alert details, gather initial context, and flag events for review; does not independently close alerts until proficiency is demonstrated.

• Assist during incident response as directed; document findings accurately while the Senior Analyst or Director leads investigation and containment.

• Document all incidents and lessons learned; help manage the daily FreshService inbox and InfoSec mailbox under Senior Analyst oversight.

• Follow established security playbooks step-by-step; ask the Senior Analyst before deviating from any documented process.

Vulnerability Management

• Learn to run vulnerability scans using Tenable under Senior Analyst instruction, with scope and results reviewed before distribution.

• Keep vulnerability tracking records current as directed; Senior Analyst determines prioritization and owner communications.

• Verify remediation activities to confirm vulnerabilities are fully resolved.

• Pull and organize vulnerability data as directed; does not interpret trends or produce reports independently.

Identity & Access Security

• Learn identity and access controls within Microsoft Entra ID; assist with assigned tasks under Senior Analyst direction.

• Assist with access reviews by pulling reports and logging entries; flag anomalies to the Senior Analyst and process removals only after approval.

• Learn to recognize anomalous sign-in and access patterns; escalate all concerns to the Senior Analyst.

Vendor & Third-Party Risk

• Gather vendor documentation and complete questionnaire sections as directed; does not independently evaluate or rate vendor risk.

• Complete vendor questionnaire entries accurately; flag anything unclear to the Senior Analyst.

• Keep third-party risk register records current as directed; does not modify risk ratings without Senior Analyst approval.

• Participate in software onboarding reviews prior to procurement approval.

Security Governance, Compliance & Awareness

• Assist with maintaining InfoSec policies and procedures; support internal audits and compliance reviews.

• Administer phishing simulations, coordinate security training assignments, and track completion rates.

• Contribute to disaster recovery documentation and tabletop exercises.

• Stay current on emerging threats and developments relevant to higher education.

Qualifications

Required

• Bachelor’s degree from an accredited institution in any field; IT or technical background a plus
• Experience in IT support, helpdesk, or systems administration; no prior cybersecurity experience required
• Basic familiarity with Microsoft 365 and Windows; M365 security tool experience a plus
• General understanding of user accounts, permissions, and access concepts from an IT perspective
• Strong written and verbal communication skills; able to document findings clearly

Preferred

• CompTIA Security+ in progress or planned within first 12 months
• Hands-on exposure via home labs, TryHackMe, Hack The Box, or similar platforms
• Demonstrated curiosity about cybersecurity through self-study or personal projects
• Experience with ticketing systems such as FreshService or ServiceNow
• Pursuit of a degree or certification in cybersecurity or information technology