Security & Network Analyst II (Cybersecurity)

Location: Bar Harbor, Maine, United States; full-time onsite role.

Pay range: $74,772–$125,184 per year.

Company

hirify.global is an independent nonprofit biomedical research institution focused on genetics, genomic solutions, disease research, and biomedical services, with locations across the United States, Japan, and China.

What you will do

• Monitor, investigate, and resolve alerts from SIEM, EDR/XDR, IDS/IPS, firewalls, vulnerability management, identity, cloud security, and network monitoring platforms.
• Analyze logs, endpoint telemetry, authentication records, DNS activity, proxy logs, packet captures, and network flow data to identify threats, operational issues, and performance concerns.
• Conduct incident response activities including event analysis, scoping, evidence collection, documentation, containment support, escalation, and post-incident follow-up.
• Troubleshoot DNS, DHCP, routing, switching, firewall policies, VPNs, wireless networks, identity services, endpoints, and application access.
• Support vulnerability management, firewall rule reviews, VPN troubleshooting, network segmentation validation, access control issues, implementation testing, and post-change monitoring.
• Collaborate with security, network, infrastructure, and application teams; maintain investigation and incident documentation; provide guidance to less experienced analysts; and contribute to security projects and continuous improvement.

Requirements

• Bachelor’s degree required; a master’s degree is preferred. A combination of education and experience may substitute for a degree.
• At least three years of experience in technology, cybersecurity operations, network operations, infrastructure support, incident response, or a closely related technical role.
• Ability to work independently on complex tickets, alerts, incidents, and troubleshooting tasks with limited supervision and sound escalation judgment.
• Intermediate knowledge of TCP/IP, DNS, DHCP, routing, switching, VPNs, firewalls, proxy services, wireless networking, endpoint security, identity and access management, and enterprise security controls.
• Experience analyzing endpoint, identity, network, cloud, and application telemetry for anomalous activity, unauthorized access, malware, phishing, credential abuse, lateral movement, vulnerability exploitation, and service degradation.
• Ability to perform structured troubleshooting and root-cause analysis across security, network, endpoint, identity, and application layers.
• Experience supporting incident response, including alert validation, event correlation, impact assessment, containment coordination, evidence collection, timeline development, and post-incident documentation.
• Ability to take initiative, manage competing priorities in a high-volume ticket and alert environment, build productive relationships with internal customers and cross-functional teams, and communicate technical findings clearly.
• Ability to manage tickets and investigations at a steady pace, document work clearly, identify tradeoffs, understand relationships between systems, solve ambiguous problems, and contribute to durable process improvements.

Nice to have

• Intermediate knowledge of SOC, NOC, security operations, network operations, managed security, enterprise infrastructure, or hybrid security/network operations environments.
• Experience with SIEM tools such as Splunk; EDR/XDR tools such as Microsoft Defender or Cortex XDR; Palo Alto Panorama/PA or Cisco firewalls; Tenable; PhishER; IDS/IPS; packet capture; network monitoring; log analysis; ITSM; and cloud security or infrastructure monitoring tools.
• Experience reviewing firewall policies, VPN access, network segmentation, remote access technologies, and secure connectivity workflows.
• Knowledge of NIST NICE, NIST Cybersecurity Framework, NIST SP 800-53, CIS Controls, MITRE ATT&CK, or similar security frameworks.
• Experience with hybrid cloud or SaaS environments such as AWS, Azure, Google Cloud, Microsoft 365, Okta, or Entra ID.
• Experience with PowerShell, Python, Bash, KQL, SPL, SQL, SOAR playbooks, or API-based workflows.
• Security, network, or cyber defense certifications such as Security+, Network+, CySA+, SSCP, GSEC, CCNA, or equivalent experience.
• Master’s degree and demonstrated readiness to progress through implementation, automation, design validation, and technical ownership skills.

Culture & Benefits

• Work within a nonprofit biomedical research institution dedicated to improving human health.
• Collaborate with security engineering, network engineering, infrastructure, application, vendor, leadership, and internal customer groups.
• Support continuous education, knowledge sharing, mentoring, and ongoing improvement of security and network operations.
• Equal employment opportunities are provided across job classifications in accordance with applicable laws.