Security Analyst

Remote: 
Full Remote
Contract: 
Work from: 

Offer summary

Qualifications:

Bachelor’s degree or equivalent work experience/military experience, 1-3 years of experience with enterprise-level case management tools, Familiarity with SIEM platforms and vulnerability scanning tools, Strong written and verbal communication skills with a focus on clarity..

Key responsibilities:

  • Investigate and assess security alerts to determine threat severity and scope
  • Conduct initial incident response actions including log collection and asset isolation
  • Stay updated on emerging threats and support investigations
  • Provide timely updates to leadership and convey findings to clients in non-technical language.

Presidio logo
Presidio XLarge https://www.presidio.com/
1001 - 5000 Employees
See all jobs

Job description

Presidio, Where Teamwork and Innovation Shape the Future 
At Presidio, we’re at the forefront of a global technology revolution, transforming industries through cutting-edge digital solutions and next-generation AI. We empower businesses—and their customers—to achieve more through innovation, automation, and intelligent insights. 

The Role 
Presidio is seeking a detail-oriented and motivated Security Analyst to join our Managed Services team. This is a remote role focused on investigating and triaging security alerts through our SOAR platform in a fast-paced, multi-tenant Managed Detection and Response (MDR) environment.

The ideal candidate will demonstrate a strong analytical mindset, foundational threat intelligence knowledge, and the ability to clearly communicate technical findings in client-facing language. Success as a Security Analyst in a fast-paced, multi-tenant MDR environment requires leveraging meticulous attention to detail, advanced pattern recognition, strong threat intelligence acumen, and clear, effective written communication to identify and respond to security threats.

Travel Requirements: 

This is a remote role to reside in the Continental US and does not require any travel.

Responsibilities include:

  • Security Alert Triage: Investigate and assess security alerts following defined procedures to determine threat severity and scope.
  • Incident Response: Conduct initial incident response actions including log collection, asset isolation, and targeted scans; escalate confirmed incidents per protocol.
  • Threat Research: Stay up to date on emerging threats, tactics, techniques, and procedures (TTPs) to support investigations.
  • Client Communication: Provide timely updates to MDR leadership and convey findings to clients in plain, non-technical language.
  • Documentation: Record detailed investigation steps and evidence in case management systems; draft concise, audience-appropriate client summaries.

Required Skills and Professional Experience:

  • Bachelor’s degree or the equivalent work experience and/or military experience
  • 1-3 years of hands-on experience with enterprise-level case management tools 
  • Experience with SIEM platforms such as LogRhythm, Logz.io, or Elasticsearch 
  • Familiarity with vulnerability scanning tools like Tenable/Nessus 
  • Regex & Logic Fluency: Working knowledge of regular expressions and Boolean logic, enough to write, read and tweak simple patters and spot anomalies (deep mastery not required)
  • Windows Security Knowledge: Familiarity with key Windows security event IDs 
  • Indicator Pivoting: Ability to interpret security rules and pivot using indicators in SIEM/EDR tools 
  • Threat Intelligence: Experience with OSINT tools and methods to verify IOCs (e.g., hashes, URLs, IPs) 
  • Analytical Thinking: Ability to interpret data artifacts, suggest tuning, and make evidence-based decisions 
  • Technical Foundation: Understanding of Windows logs, networking fundamentals, and common protocols (SMB, RDP, DNS, LDAP, SQL) 
  • Self-Motivation: Proactive and curious; thrives in a fast-paced, 24/7/365 shift-based environment 
  • Communication Skills: Strong written and verbal communication with a focus on clarity and professionalism

Preferred Skills and Professional Experience: 

  • Security certifications such as CySA+, GISF (SANS SEC301), SSCP, CEH, or CCNA-Security.
  • Experience working in a multi-tenant MSSP/SOC environment.

    Your future at Presidio
    Joining Presidio means stepping into a culture of trailblazers—thinkers, builders, and collaborators—who push the boundaries of what’s possible. With our expertise in AI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world. 

    Here, your impact is real. Whether you're harnessing the power of Generative AI, architecting resilient digital ecosystems, or driving data-driven transformation, you’ll be part of a team that is shaping the future. 

    Ready to innovate? Let’s redefine what’s next—together. 

    About Presidio
    At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio’s expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information, visit www.presidio.com. 

    *****

    Applications will be accepted on a rolling basis.

    Presidio is an Equal Opportunity / Affirmative Action Employer / VEVRAA Federal Contractor. All qualified candidates will receive consideration for this position regardless of race, color, creed, religion, national origin, age, sex, citizenship, ethnicity, veteran status, marital status, disability, sexual orientation, gender identification or any other characteristic protected by applicable federal, state, and local statutes, regulations, and ordinances.

    To read more about discrimination protections under Federal Law, please visit: https://www.dol.gov/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf

    If you have any difficulty using our online system and need an accommodation in the job application process due to a disability, please send an email to recruitment@presidio.com for assistance.

    Presidio is a VEVRAA Federal Contractor requesting priority referrals of protected veterans for its openings. State Employment Services, please provide priority referrals to recruitment@presidio.com.

    Notice to Massachusetts Candidates: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

    Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our careers email address, Presidio employees or any other means. Presidio is not responsible for any fees related to unsolicited resumes/CVs.

     #LI-PH1

    Required profile

    Experience

    Spoken language(s):
    English
    Check out the description to know which languages are mandatory.

    Other Skills

    • Analytical Thinking
    • Self-Motivation
    • Verbal Communication Skills

    Security Analyst Related jobs