Associate Analyst, Cyber Security

Nightingale College is hiring an Associate Analyst, Cybersecurity to perform day-to-day security tasks under the direction of senior information security staff. The role supports security monitoring and incident response, vulnerability and access management, vendor risk, and security governance and compliance.

What you'll do:

• Learn to monitor security alerts using Cato and Checkpoint alongside the Senior Analyst, building triage judgment before working independently
• Under Senior Analyst guidance, document alert details, gather initial context, and flag events for review; does not independently close alerts until proficiency is demonstrated
• Assist during incident response as directed; document findings accurately while the Senior Analyst or Director leads investigation and containment
• Document all incidents and lessons learned; help manage the daily FreshService inbox and InfoSec mailbox under Senior Analyst oversight
• Follow established security playbooks step-by-step; ask the Senior Analyst before deviating from any documented process
• Learn to run vulnerability scans using Tenable under Senior Analyst instruction, with scope and results reviewed before distribution
• Keep vulnerability tracking records current as directed; Senior Analyst determines prioritization and owner communications
• Verify remediation activities to confirm vulnerabilities are fully resolved
• Pull and organize vulnerability data as directed; does not interpret trends or produce reports independently
• Learn identity and access controls within Microsoft Entra ID; assist with assigned tasks under Senior Analyst direction
• Assist with access reviews by pulling reports and logging entries; flag anomalies to the Senior Analyst and process removals only after approval
• Learn to recognize anomalous sign-in and access patterns; escalate all concerns to the Senior Analyst

What they're looking for:

• Bachelor's degree from an accredited institution in any field
• IT or technical background a plus
• Experience in IT support, helpdesk, or systems administration; no prior cybersecurity experience required
• Basic familiarity with Microsoft 365 and Windows
• M365 security tool experience a plus
• General understanding of user accounts, permissions, and access concepts from an IT perspective
• Strong written and verbal communication skills; able to document findings clearly
• CompTIA Security+ in progress or planned within first 12 months
• Hands-on exposure via home labs, TryHackMe, Hack The Box, or similar platforms
• Demonstrated curiosity about cybersecurity through self-study or personal projects
• Experience with ticketing systems such as FreshService or ServiceNow
• Pursuit of a degree or certification in cybersecurity or information technology