Security Analyst

We are looking for a Security Analyst to act as the first line of defense for user-focused security at Syringa. In this role, you will triage phishing and suspicious email reports, respond to user-related security incidents, and analyze user behavior to spot risk activity before it becomes a problem.
The ideal person for this role is someone who is detail-oriented, curious, and is comfortable with working directly with employees across the organization.

Responsibilities
Email and Phishing Report Response:
· Monitor ticketing queue for user-submitted phishing reports, and triage each within defined response times.
· Analyze suspicious messages, including headers, sender reputation, links, and attachments, using approved tools and sandboxes.
· Remove malicious messages from user mailboxes and block senders and domains

Security Incident Response:
· Respond to user-related incidents such as compromised accounts, malware alerts, lost or stolen devices, and suspicious sign-ins.
· Follow incident response playbooks for containment, including password resets, session revocation, and device isolation.
· Document incidents, actions taken, and timelines in the ticketing system.
· Escalate complex or high-severity incidents to senior staff and support them during investigations.

User Behavior Analysis:
· Review identity and access alerts, such as impossible travel, risky sign-ins, and unusual MFA activity.
· Monitor data loss prevention and sensitivity labeling alerts for risky handling of confidential information.
· Identify trends in user risk and recommend targeted follow-up or training.
· Assist with periodic access reviews and account hygiene checks.

Security Awareness and Continuous Improvement:
· Support phishing simulation campaigns and security awareness training.
· Help write and maintain playbooks, knowledge base articles, and user-facing security guidance.
· Suggest improvements to detection rules, processes, and tools based on lessons learned.
Requirements

· Familiarity with Windows endpoints, Entra ID, and Microsoft 365.
· Basic understanding of networking concepts such as DNS, IP addressing, and common protocols.
· Experience with a SIEM or log analysis tool.
· Experience using a ticketing or service desk system.
· Clear written and verbal communication, with the ability to explain security issues to non-technical employees.
· Strong attention to detail and the ability to follow documented procedures consistently.

Education and Experience
· Associate's or bachelor's degree in cybersecurity, information technology, or a related field, or equivalent combination of education and experience.
· 0 to 2 years of experience in IT support, help desk, network operations, or a security-related role.