Cyber Analyst I

Work Arrangement

This is a remote position.

Job Overview
The Cybersecurity Analyst I is an entry-level role responsible for security monitoring, alert triage, evidence collection, and daily operational security tasks across regulated environments.

Working business hours and partnering with a managed detection and response (MDR) service for off-hours coverage, this role ensures continuous visibility and timely response to security events. This position supports ongoing security operations and compliance efforts, contributing to detection, response, and audit readiness aligned with CMMC Level 2 and NIST 800-171.

The ideal candidate is detail-oriented, responsive, and interested in building foundational experience in security operations and monitoring within a structured cybersecurity program.

Essential Functions

• Security Monitoring & Alert Triage

Monitor security alerts and events across SIEM, endpoint, identity, and cloud platforms
Perform initial triage and analysis of alerts to determine validity and severity
Escalate confirmed or high-risk events to senior engineers, MDR providers, or leadership as appropriate
Maintain awareness of threat activity and indicators across the environment

• Incident Response Support

Assist in investigation and response activities for security incidents
Collect relevant logs, system data, and artifacts to support incident analysis
Document findings and actions taken during incident handling
Coordinate with MDR/SOC providers during active security events

• Compliance & Evidence Collection

Collect, organize, and maintain security evidence aligned to CMMC Level 2 and NIST 800-171 requirements
Support audit readiness by ensuring documentation and evidence is accurate and up to date
Assist in tracking control effectiveness and compliance activities

• Security Operations Support

Perform routine security checks, monitoring tasks, and operational procedures
Assist in maintaining visibility across systems, users, and security tools
Support vulnerability tracking and remediation follow-ups as needed
Contribute to improving monitoring coverage and alert quality

• Documentation & Reporting

Maintain accurate records of alerts, incidents, and operational activities
Assist in developing runbooks, standard operating procedures, and documentation
Provide clear and concise updates to team members and leadership as needed

• Collaboration & Continuous Learning

Work closely with cybersecurity engineers, system administrators, and MDR providers
Participate in team initiatives, security projects, and process improvements
Continuously build knowledge of security tools, threats, and monitoring techniques
Seek guidance and mentorship from senior team members

• Perform other duties as assigned.

Standard Essential Functions

Regular and reliable attendance on a full time basis [or in accordance with posted schedule].
Responsible for exhibiting professional behavior with both internal and external business associates that reflects positively on the company and is consistent with the company's policies and practices. Embodies AEVEX’s cultural values and aligns daily actions with department goals and company culture.

Qualifications and Competencies
• Familiarity with security monitoring concepts and alert triage
• Basic understanding of networking, systems, and security fundamentals

• Exposure to tools such as:

SIEM platforms (e.g., CrowdStrike NG SIEM, Splunk, Sentinel)

EDR tools (e.g., CrowdStrike or similar)

Microsoft security stack (Defender, Entra ID)

• Basic understanding of:

Incident response processes and security operations
Threat detection and common attack techniques
Compliance frameworks (CMMC, NIST 800-171)

• Strong attention to detail and ability to follow structured processes
  • Good communication and documentation skills
  • Ability to work independently during assigned hours while coordinating with external MDR support

Education / Certifications
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or other related field.

Experience
• 0–3 years of experience in IT, cybersecurity, or related technical roles.

Physical Requirements
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties the employee is:

Constantly required to sit, and to reach to use computers and other office equipment
For the purpose of this summary, occasionally is used to represent up to 1/3 of the time given to the work day, frequently represents 1/3 to 2/3 of the time and constantly represents 2/3 or more of the time.

Security Clearance
• Ability to obtain/maintain a Secret DoD clearance, U.S. Citizenship required.