Note: The job is a remote job and is open to candidates in USA. Circular Action Alliance is hiring an Information Security Analyst to help protect staff, volunteer, and client data across its systems and cloud services. The role monitors and investigates security events, supports incident response and security tools, and contributes to awareness programs and ongoing security improvements.

Responsibilities

• Monitor and analyze security events across network, endpoint, and cloud environments using Microsoft Sentinel to identify suspicious activity, threats, and policy violations
• Review Microsoft 365 and Azure AD sign-in logs and conditional access alerts for suspicious activity, such as impossible travel, risky sign-ins, and MFA failures
• Investigate and validate potential security incidents, including malware infections, phishing campaigns, unauthorized access attempts, and other malicious activities
• Perform initial triage, classification, and prioritization of security alerts to determine impact, severity, and required response actions
• Assist with managing Cloudflare security, including reviewing DNS and bot protection events
• Assist with managing 1Password for teams, including onboarding and offboarding users, organizing vaults, reviewing access permissions, and encouraging strong password and passkey practices
• Review security-score recommendations and tasks for Azure subscriptions and make necessary changes to increase the security posture of the organization
• Support phishing and security awareness programs using KnowBe4 by developing campaigns, tracking outcomes, and preparing short training sessions and follow-up communications for staff
• Assist with vulnerability and configuration assessments on Windows endpoints and key SaaS services, documenting findings and tracking remediation efforts
• Assist in documenting security procedures, checklists, and “how-to” guides designed for non-technical staff and volunteers
• Participate in at least one focused project, such as improving 1Password usage, tightening M365 security baselines, or enhancing phishing simulations, that align both your interests and the organization’s needs
• Support incident response efforts by collecting and analyzing relevant evidence, escalating critical threats, and assisting with containment and remediation activities
• Correlate logs and security events from multiple data sources, including firewalls, IDS/IPS, web servers, endpoints, and cloud platforms, to identify indicators of compromise
• Leverage threat intelligence, including Indicators of Compromise (IOCs) and adversary TTPs, to enhance detection capabilities and strengthen security monitoring
• Document investigations, incident findings, response actions, and lessons learned to support continuous improvement of security operations and response processes
• Produce security metrics, reports, and operational summaries that communicate threat trends, incident activity, and program effectiveness to stakeholders
• Collaborate closely with Security Operations, IT, and other cross-functional teams to ensure a coordinated and effective approach to threat detection and incident response
• Stay current on emerging threats, attack techniques, vulnerabilities, and security best practices to continuously improve monitoring and detection capabilities
• Other job-related duties as assigned

Skills

• Solid understanding of networking, operating systems (especially Windows), and key security concepts like MFA, phishing, and least privilege
• Knowledge of Microsoft 365 and fundamental cloud concepts
• Strong communication skills and patience when working with non-technical staff in a mission-driven environment
• Proven reliability, confidentiality, and integrity in managing sensitive information
• Associate's or bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent self-directed learning such as certificates or bootcamps
• 1-2 years experience in IT, Cybersecurity or other related roles
• Experience with Microsoft Defender, Microsoft Sentinel, KnowBe4, Cloudflare, and 1Password

Benefits

• Remote in the United States

Company Overview