Analyst - IT Security

Circular Action Alliance is hiring an Information Security Analyst to help protect staff, volunteer, and client data across its systems and cloud services. The role monitors and investigates security events, supports incident response and security tools, and contributes to awareness programs and ongoing security improvements.

What you'll do:

• Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations
• Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures
• Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities
• Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions
• Assist with managing Cloudflare security, including reviewing DNS and bot protection events
• Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices
• Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization
• Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff
• Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts
• Assist in documenting security procedures, checklists, and “how-to” guides designed for non-technical staff and volunteers
• Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organization’s needs
• Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities

What they're looking for:

• Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege
• Knowledge of Microsoft 365 and fundamental cloud concepts
• Strong communication skills and patience when working with non-technical staff in a mission-driven environment
• Proven reliability, confidentiality, and integrity in managing sensitive information
• Associate's or bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps
• 1-2 years experience in IT, Cybersecurity or other related roles
• Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password

Benefits:

• Remote in the United States