Junior Security Analyst

Valley Asphalt Corporation is hiring a Junior Security Analyst to support day-to-day cybersecurity operations under the guidance of the Security Engineer Lead. The role focuses on security monitoring, investigations, incident response, vulnerability management, identity and endpoint security, and Microsoft security technologies.

What you'll do:

• Monitor security alerts and perform initial analysis and triage of potentially suspicious activity
• Investigate suspicious emails, phishing attempts, compromised accounts, malware, and other potential security events
• Document findings, actions taken, and escalation details clearly and accurately, and learn to distinguish meaningful concerns from false positives
• Assist the Security Engineer Lead with cybersecurity investigations and incident response activities, including gathering logs, maintaining timelines, and supporting follow-up actions
• Assist with vulnerability identification, tracking, remediation, and validation
• Work with infrastructure, service delivery, application, and external security partners to address endpoint, network, cloud, identity, and application security issues
• Support day-to-day security operations across Microsoft 365, Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, and related security technologies
• Assist with identity and access reviews, multifactor authentication, account security, security monitoring, and alerting improvements
• Build practical knowledge of how identity, endpoint, email, cloud, and collaboration security controls work together
• Review employee-reported suspicious activity and potential security incidents, escalating concerns when appropriate
• Assist with phishing simulations, cybersecurity awareness activities, documentation, and security improvement projects
• Develop technical skills through training, mentoring, hands-on assignments, and continued study of emerging threats and security technologies

What they're looking for:

• Bachelor's or associate degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field; completion of a reputable cybersecurity bootcamp; or comparable technical training supported by hands-on work
• Practical exposure through a cybersecurity or information technology internship, co-op, apprenticeship, college lab, academic project, home lab, cybersecurity competition, capture-the-flag exercise, or similar experience
• Foundational knowledge of cybersecurity principles, common attack techniques, networking concepts, Windows, Microsoft 365, identity and access management, endpoint security, vulnerability management, or log analysis
• Strong curiosity, attention to detail, written communication, documentation, judgment, and willingness to learn from feedback
• Ability to protect confidential information, follow established processes, and escalate issues when additional expertise or authority is required
• Exposure to Microsoft Defender, Microsoft Sentinel, Microsoft Entra ID, Microsoft 365, or comparable security and identity technologies
• Basic scripting experience with PowerShell, Python, or a similar language
• An entry-level certification such as CompTIA Security+, ISC2 Certified in Cybersecurity, Microsoft Security, Compliance, and Identity Fundamentals (SC-900), or Microsoft Security Operations Analyst (SC-200)