It & cybersecurity jobs in Seattle, WA

About the role

The Cybersecurity Analyst supports day-to-day Security Operations and Incident Response by monitoring and investigating threats, coordinating incident response, conducting threat intelligence and threat hunting, managing operational vulnerability workflows, and maintaining accurate cases and security metrics. Security Engineering owns security-platform engineering and vulnerability-scanning platforms, while technology and application owners execute remediation. This position is open to candidates in the Seattle, WA area . You will have a hybrid remote/in-office schedule where you will work from our casual, pet-friendly office at least 3 days a week .

What you'll bring

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field, or equivalent practical experience.
• 3+ years of experience in cybersecurity operations, incident response, IT operations, system administration, network security, or a related area.
• Experience investigating alerts using SIEM, EDR/XDR, identity, email, cloud, network, or vulnerability technologies.
• Knowledge of common attacker techniques, phishing, malware, account compromise, privilege misuse, lateral movement, exfiltration, and vulnerability exploitation.
• Demonstrated experience applying threat intelligence and incident telemetry to vulnerability prioritization and exploitation assessment.
• Experience with security automation or scripting, digital-evidence handling, identity investigations, third-party incident analysis, and structured case management.
• Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments.
• Familiarity with MITRE ATT&CK and common detection, threat-hunting, and incident-response methodologies.
• Understanding of vulnerability scanning and remediation workflows and the division of responsibility between vulnerability-program governance, threat-led escalation, and asset-owner remediation.
• Knowledge of NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or privacy and breach-response obligations.
• Ability to support defined US business-hour coverage and participate in an escalation or on-call rotation.
• Availability to assist with high-severity incidents outside normal working hours when required.

Benefits