Company: L2R Consulting

Location: Hillsborough County, Florida

Work Arrangement: Full-time, on-site at client location

Schedule: Monday–Friday, standard business hours

Employment Type: Contract-to-permanent

Key Responsibilities

Monitor and prioritize security alerts based on severity, business risk, and potential impact.
Investigate security incidents using SIEM, SOAR, EDR, network, identity, cloud, and SaaS telemetry.
Distinguish true security threats from false positives through detailed analysis and troubleshooting.
Support incident-response activities, including containment, evidence preservation, remediation, and recovery.
Analyze logs, endpoint artifacts, network traffic, user activity, and system behavior.
Determine the root cause, scope, and potential impact of security incidents.
Document investigative findings, actions, evidence, and recommendations in ticketing and case-management systems.
Communicate technical findings clearly to client stakeholders and provide practical remediation guidance.
Follow established security procedures, escalation paths, playbooks, and incident-response runbooks.
Help improve detection rules, alert thresholds, response playbooks, and operating procedures.
Remain current on emerging vulnerabilities, threat intelligence, malware, and attacker techniques.
Build strong working relationships with the client’s technology and security teams.

Required Qualifications

Approximately 4–8 years of cybersecurity monitoring, SOC, incident-response, or related security experience.
Hands-on experience reviewing, triaging, and investigating security alerts.
Working knowledge of SIEM, SOAR, and endpoint detection and response tools.
Experience analyzing logs and correlating information across multiple security data sources.
Understanding of phishing, malware, account compromise, suspicious network activity, and common attack methods.
Familiarity with the MITRE ATT&CK framework.
Strong troubleshooting, documentation, and analytical skills.
Professional communication skills and the ability to work directly with client personnel.
Advanced experience managing security incidents from initial detection through containment, remediation, and recovery.
Strong forensic investigation skills, including log analysis, endpoint artifact review, evidence preservation, and timeline reconstruction.
Experience correlating endpoint, network, cloud, identity, email, and SaaS telemetry.
Ability to lead complex or high-severity investigations and coordinate response activities with technical stakeholders.
Experience improving SIEM detection logic, alert quality, escalation criteria, and incident-response playbooks.
Strong understanding of attacker behavior, malware, persistence methods, lateral movement, and data-exfiltration techniques.
Ability to translate complex findings into clear business risks and actionable recommendations.
Strong customer-facing communication, leadership, and documentation skills.
Industry certification such as GCIH, GCFA, GCIA, GCFE, CISSP, or an equivalent credential.
Ability to work on-site Monday through Friday in Hillsborough County.

Preferred Qualifications

Hands-on experience with Google Security Operations, Chronicle SIEM, and SOAR technologies.
Experience supporting K–12 education, government, or other public-sector environments.
Familiarity with FERPA, CJIS, NIST, or related security and compliance frameworks.
Vendor-specific SIEM or EDR certifications.
Scripting or automation experience using Python, PowerShell, or similar technologies.
Experience developing detection rules, response workflows, or security automations.

What We’re Looking For

We are looking for cybersecurity professionals who remain calm during active incidents, investigate thoroughly, communicate confidently, and understand the importance of customer service. Successful candidates will be analytical, dependable, detail-oriented, and capable of becoming trusted security resources within the client’s environment.

Applicants must be able to work full-time on-site in Hillsborough County, Florida. These are not remote positions.

L2R Consulting

Vacatures

Cyber Security Analyst