Want to know if this job is worth applying to?
United States
Remote only
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cyber Security Specialist based in the United States.
We are seeking a hands-on Cyber Security Specialist to protect enterprise systems, networks, and digital assets against evolving cyber threats. In this remote role, you will manage and optimize security technologies, investigate security incidents, and lead response and remediation efforts across a complex IT environment. You will apply your expertise in digital forensics, threat hunting, vulnerability management, and security assessments to identify risks and strengthen defenses. Working closely with information security leadership, internal teams, and external partners, you will support security operations while balancing business needs with robust protection measures. The position is well suited to an analytical, proactive professional who can independently manage investigations and contribute to continuous security improvement. Candidates with experience in financial services, government, or other highly regulated industries are particularly encouraged to apply.
Monitor, detect, investigate, and respond to security alerts and incidents across enterprise systems and networks.
Lead security investigations, conduct root cause analysis, collect evidence, and coordinate appropriate remediation activities.
Perform digital forensics, including log analysis, endpoint investigations, timeline reconstruction, memory analysis, and malware analysis where applicable.
Manage, configure, maintain, troubleshoot, and improve security technologies, including firewalls, endpoint detection and response (EDR), data loss prevention (DLP), intrusion detection and prevention systems (IDS/IPS), and security information and event management (SIEM) platforms.
Investigate security incidents through resolution, coordinating containment, remediation, recovery, and follow-up activities.
Conduct vulnerability assessments, risk assessments, security audits, configuration reviews, and compliance checks to identify weaknesses and strengthen security controls.
Perform proactive threat hunting and research emerging threats, attack techniques, and security technologies to improve the organization's defensive capabilities.
Execute incident response procedures, preserve digital evidence, and maintain appropriate chain-of-custody documentation.
Collaborate with internal IT and business teams, security colleagues, and third-party partners to investigate incidents and implement corrective measures.
Research, evaluate, and implement new security solutions that address evolving threats and organizational requirements.
Develop and maintain accurate technical documentation, including standard operating procedures, security guidelines, project plans, and architecture diagrams.
Manage multiple security projects and support activities while meeting deadlines and maintaining high standards of quality.
Work closely with the Director of Information Security, providing accurate and timely updates and following established direction and priorities.
Support continuous improvement of security practices, policies, technologies, and operational processes.
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related discipline, or significant equivalent professional experience.
At least 4–5 years of hands-on cybersecurity experience, particularly in security operations and incident response.
Practical experience with digital forensics, including memory analysis and malware analysis.
Strong hands-on knowledge of SIEM, EDR, DLP, firewall, and related enterprise security technologies.
Solid understanding of networking, operating systems, security architecture, computer systems, telecommunications, and associated hardware.
Familiarity with recognized security frameworks and standards, including NIST and ISO 27001.
Extensive knowledge of cybersecurity best practices, incident investigation techniques, and security control implementation.
Required certification: At least one of the following certifications specified in the original listing: GSEC, GCIH, GPEN, GCED, PCNSE, or OSCP.
Strong analytical and problem-solving skills, including the ability to quickly identify root causes during security incidents and develop practical solutions.
Excellent written and verbal communication, interpersonal, and documentation skills.
Ability to create detailed project plans and comprehensive security documentation, including procedures, guidelines, and architecture diagrams.
A proactive, creative, and security-focused mindset, with the ability to think beyond conventional approaches and adapt to emerging threats.
Strong customer service orientation and sound judgment when balancing security requirements with business objectives.
Ability to work collaboratively with technical teams, leadership, and external partners while managing multiple projects and support responsibilities.
Capacity to work independently with minimal supervision in a fast-paced, dynamic environment.
Location requirement: Must reside in one of the specified areas: the New York tri-state region (New York, New Jersey, or Connecticut), California, the Washington, DC metropolitan area, or the Kansas City metropolitan area.
Work schedule: Must be available to work Monday through Friday, 6:00 a.m. to 2:00 p.m. Eastern Time, participate in an on-call rotation, and respond to emergency calls outside regular hours when security incidents occur.
Willingness to travel when required and report for work on scheduled days or during additional hours as needed.
Annual base salary: $145,000–$185,000, depending on relevant experience, qualifications, education, performance, location, and organizational needs.
Employment type: Full-time.
Work arrangement: Remote, subject to the specified eligible geographic locations.
Technical impact: Opportunity to protect enterprise systems and contribute directly to security operations, incident response, and risk reduction.
Professional development: Exposure to enterprise security technologies, digital forensics, threat intelligence, and evolving cybersecurity practices.
Cross-functional collaboration: Work closely with information security leadership, technical teams, and external partners.
Ownership and autonomy: Manage investigations, security projects, and technical responsibilities with minimal supervision.
Healthcare, retirement, paid time off, and other benefits: Specific details were not provided in the original listing and should be confirmed during the hiring process.