Security Analyst I (F-M, 12am-11am CST)
Tier-1 security analyst at MSP Ntiva: monitoring security dashboards, triaging alerts, securing compromised accounts, and escalating incidents using EDR/SIEM tools (Microsoft Sentinel/Defender, SentinelOne, CrowdStrike) with ticketing in ConnectWise. Remote role on an overnight Friday–Monday, 12am–11am CST shift.
- Compensation
- $49K–$70K / yr
- Location
- Mc Lean, Virginia, United States
- Work setup
- Remote
- Seniority
- Junior
- Employment
- Contract
- Experience
- 1+ years
- Category
- Security
- Posted
Skills
Must have
- 1-2 years of experience in Cybersecurity
- 3-5 years in an IT role including log analysis, account/access management, or endpoint troubleshooting
- CySA+, GCIH, or SC-200 (or actively pursuing)
- Hands-on exposure to at least one EDR/SIEM platform (e.g., SentinelOne, CrowdStrike, Microsoft Defender, Microsoft Sentinel)
- Direct hands-on experience using ConnectWise Manage for ticket documentation with audit-ready incident notes
- Practical familiarity with at least one of: SIEM log correlation, Windows Event Viewer (Security log IDs like 4624/4625/4648), or a ticketing-based alert queue
- Ability to communicate professionally in English, written and orally
- U.S. citizenship required due to federal government contract obligations
- Full-time availability; no additional outside employment permitted
- Willing and able to travel if the need arises (expected to be infrequent)
Nice to have
- Proximity to one of Ntiva's Centers of Excellence (Lombard IL; McLean VA; Shreveport LA; Overland Park KS)
- Security+ certification
Full description
Are you looking for limitless career opportunities with a company that values growth, innovation, and teamwork? At Ntiva, we’re more than a Managed Services Provider, we’re a community dedicated to helping each other, our clients, and their businesses thrive both personally and professionally. Ntiva is a culture of people who are passionate about the work…and each other.
Our clients view us as an essential part of their teams, relying on us for strategic guidance, fast solutions to complex challenges, and proactive support. With strategic locations across the U.S. and leadership from our founder, Steven Freidkin, we’re on the front lines of a fast-paced industry, facing cybersecurity threats and rapid technology changes together.
If you thrive in a dynamic, supportive environment and enjoy going above and beyond, we’d love to meet you. Come explore one of our many opportunities and grow with us!
How you’ll make an Impact
As a Security Analyst I, you'll be our first line of defense against cyber threats. You'll swiftly respond to security alerts, investigate potential malicious activity, secure compromised accounts, and review change activity to prevent or minimize security events. By managing routine security tool adjustments and escalating complex issues, you'll ensure our defenses remain effective and responsive, safeguarding our client's assets and data.
Location and Work Expectations
- This is a remote position; however, team members should be willing and able to travel if the need arises, though such travel is expected to be infrequent. Candidates with proximity to one of our Centers of Excellence are preferred (Lombard, IL; McLean, VA; Shreveport, LA; Overland Park, KS).
- Schedule: 4 days on, 3 days off! Friday-Monday, 12am–11am CST (following a required training period on day shift, M–F 8am–5pm CST — duration varies by individual progress)
- This role also includes participation in a rotating on-call schedule.
What you will be doing
- Monitor & Investigate: Actively monitor security dashboards, queues, and alerts from various sources (automated tools, escalated tickets) to detect potential threats.
- Incident Triage & Response: Conduct initial investigations into security alerts, perform rapid response actions like securing user accounts, and collect necessary log data for analysis.
- Escalate Effectively: Analyze findings to determine the scope and severity of incidents, resolving straightforward issues and escalating complex cases to Level 2 Analysts with clear, concise information.
- Security Tool Management: Review and implement authorized, routine changes to security tools, such as processing client exemption requests in the EDR or temporarily adjusting settings for testing.