Security Analyst I (Friday–Monday, 12am–11am CST)

Ntiva, Inc. is a Managed Services Provider dedicated to helping clients thrive through innovation and teamwork. As a Security Analyst I, you will be the first line of defense against cyber threats, responding to security alerts, investigating potential malicious activities, and ensuring the security of client assets and data.

What you'll do:

• Actively monitor security dashboards, queues, and alerts from various sources (automated tools, escalated tickets) to detect potential threats
• Conduct initial investigations into security alerts, perform rapid response actions like securing user accounts, and collect necessary log data for analysis
• Analyze findings to determine the scope and severity of incidents, resolving straightforward issues and escalating complex cases to Level 2 Analysts with clear, concise information
• Review and implement authorized, routine changes to security tools, such as processing client exemption requests in the EDR or temporarily adjusting settings for testing
• Work closely with fellow analysts and security engineers, sharing information, participating in team discussions, and contributing to a collaborative security environment
• Communicate professionally and clearly with end-users or clients to gather details about potential security issues, explain security procedures, and provide guidance during incident resolution
• Interact effectively with other teams (e.g., Reactive Support, Client Strategy, NOC) to coordinate security responses and share necessary information
• Maintain accurate and detailed records of investigations, actions taken, communications, and resolutions within ConnectWise
• Offer timely and helpful support related to security inquiries, upholding a professional and customer-service-oriented approach in all interactions

What they're looking for:

• 1-2 years of experience in Cybersecurity
• 3-5 years in an IT role including log analysis, account/access management, or endpoint troubleshooting
• This is a full-time role requiring your full alertness and reliable attendance during scheduled hours. Additional outside employment, regardless of hours, is not permitted
• CySA+, GCIH, or SC-200 (or actively pursuing)
• Hands-on exposure to at least one EDR/SIEM platform (e.g., SentinelOne, CrowdStrike, Microsoft Defender, Microsoft Sentinel)
• Direct hands-on experience using ConnectWise Manage for ticket documentation, with a demonstrated track record of clear, timestamped, audit-ready incident notes
• Must have practical familiarity with at least one of: SIEM log correlation, Windows Event Viewer (Security log IDs like 4624/4625/4648), or a ticketing-based alert queue
• Sharp attention to detail with a proactive approach to accuracy and thoroughness
• Passion for delivering outstanding customer service, with a track record of exceeding client expectations
• Strong enthusiasm for learning new things and ability to adapt to evolving technology trends and industry advancements
• This role involves extended periods of sitting or standing and regular use of computers and office equipment
• Ability to communicate professionally, in English, both written and orally

Benefits:

• Medical, Dental and Vision coverage for employee and family
• 401k + company-matched contributions 4% match on 5% contribution - no vesting period! (Employee and Company contribute after 90 days)
• Group Term Life and Accidental Death and Dismemberment coverage (company provided)
• Short-Term (voluntary enrollment) and Long-Term Disability coverage (company provided)
• Health Savings Account (HSA) Options / PPO Options
• Employee Assistance Program
• Paid Time Off (PTO) + Volunteer Time Off (VTO) + 8 Paid Holidays + 3 Floating Holidays
• Education Reimbursement Program
• Generous Employee Referral Program - cash bonus for successful referrals!
• Dynamic Recognition and Rewards