Cybersecurity Threat & Incident Response Analyst

MiTek is a building-industry platform innovator delivering software, services, engineered products, and automated solutions. MiTek is seeking a Cybersecurity Threat & Incident Response Analyst to investigate, coordinate, and respond to cybersecurity incidents across endpoints, identities, email, and cloud environments, while analyzing security alerts and DLP events. The role also supports containment, remediation, root cause analysis, incident documentation, and after-hours response activities.

What you'll do:

• Investigate and respond to cybersecurity incidents across endpoints, identities, email, and cloud environments, managing the full response lifecycle from detection through resolution
• Review and analyze alerts from SIEM, EDR, DLP, and other security monitoring platforms, distinguishing genuine threats from false positives and translating findings into clear, actionable next steps
• Lead incident triage, including evidence collection, root cause analysis, and thorough documentation that supports informed decision-making and long-term improvements
• Investigate data loss prevention alerts, identifying patterns of unauthorized access, policy violations, data exposure, and potential exfiltration
• Coordinate containment and remediation activities across teams, ensuring threats are addressed efficiently and normal operations are restored
• Conduct in-depth threat investigations, using behavioral and technical indicators to assess risk and protect sensitive organizational data
• Maintain accurate incident metrics and build detailed investigation records, capturing findings and response actions to support reporting and continuous improvement
• Contribute to after-hours incident response activities as needed, bringing the same rigor and focus to time-sensitive situations

What they're looking for:

• Degree in Cybersecurity, IT, or Computer Science and/or 1+ years of experience (IT or Cybersecurity)
• Experience working with SIEM, EDR, and DLP platforms
• Experience performing log analysis and security investigations
• Strong attention to detail and ability to communicate findings clearly
• CompTIA Security+, CySA+, or similar certification
• Hands-on experience with KQL, SPL, or similar query languages
• Experience developing security use cases or investigation playbooks
• Familiarity with cyber threat intelligence, IOC analysis, and attacker TTP research
• Knowledge of data classification, information protection, and data governance concepts
• Strong understanding of attacker techniques and the MITRE ATT&CK framework preferred
• Experience with a ticketing system (e.g., ServiceNow, Jira) preferred

Benefits:

• Hybrid work arrangement
• Generous time off including Paid Time Off, 13 annual holidays, and volunteer time off
• Day One Medical/Rx, Dental and Vision Plans
• Family friendly benefits including Paid Caregiver Leave, Paid Parental Leave and Adoption Reimbursement
• Performance/Incentive bonuses
• Career advancement, training opportunities, Employee Resource Groups, and tuition reimbursement
• Retirement programs including Matching 401(k) Contributions and Profit Sharing
• Employer paid Short-Term Disability, Long-Term Disability and Life Insurance
• MyFlexPay partner – allows you to track, manage and access your pay anytime