Senior Cybersecurity Analyst

The Senior Cybersecurity Analyst is a hands-on, senior individual contributor within Fluence's Global Cybersecurity team, responsible for detecting, investigating, and responding to threats across our corporate, cloud, and product environments. Working primarily in Microsoft Sentinel and Microsoft Defender XDR, this person leads complex, multi-telemetry investigations, drives proactive threat hunting informed by threat intelligence, and turns lessons learned into stronger detections, automation, and preventive controls. The role partners daily with IT infrastructure, DevOps, risk and compliance, and business teams, and interacts with managed service and vendor partners during escalations. The ideal candidate brings at least five years of security operations experience, deep hands-on skill with Microsoft security tooling and query languages such as KQL, a strong automation mindset, and a clear track record of taking ownership of incidents and improvement initiatives from start to finish. The Senior Cybersecurity Analyst also mentors junior analysts and helps set the technical standard for how the security operations team works.

• Bachelor's or master's degree in computer science, information security, cybersecurity, or a related field, or equivalent practical experience.
• Minimum 5 years of experience in security operations analysis, incident response, red teaming, penetration testing, IT audit, network operations, or enterprise risk management, with a majority of that time in a hands-on security operations role.
• Minimum 4 years of experience working with regulatory compliance and information security management frameworks such as ISO 27001, NIST CSF, or NIST SP 800-53.
• Hands-on experience monitoring and operating SIEM platforms, with demonstrated depth in Microsoft Sentinel, including analytics rules, workbooks, and data connectors.
• Hands-on experience with Microsoft Defender XDR (Defender for Endpoint, Identity, Office 365, and Cloud Apps) and with network and security technologies such as firewalls and IDS/IPS.
• Strong hands-on skills with analytical and query tools, including Kusto Query Language (KQL), SQL, and Microsoft Excel, to support investigations, alert analysis, reporting, and continuous detection improvement.
• Demonstrated experience building automation for security operations using scripting such as PowerShell or Python and orchestration tooling such as Logic Apps or a comparable SOAR platform.
• Practical experience applying threat intelligence, including adversary tracking, indicator management, and MITRE ATT&CK-based analysis, to detection and response work.
• Hands-on experience configuring and using vulnerability assessment technologies such as Tenable or Nessus.
• Experience managing security work and incidents through ticketing and workflow platforms such as ServiceNow or Jira.
• Hands-on experience running security awareness and training programs, including phishing simulation platforms such as Hoxhunt or Attack Simulation Training, learning management system administration, training assignment tracking, and campaign reporting.
• CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate (SC-200), or an equivalent certification.
• Demonstrated ownership mindset, with a track record of driving investigations and improvement initiatives to completion with limited supervision.
• Strong report writing, investigative technique, and communication skills, including the ability to present technical findings to large and non-technical audiences.
• Master's degree in cybersecurity, information security, or a related technical field.
• Additional certifications such as GCIA, GCIH, GCFA, GCTI, CISSP, or Microsoft SC-100.
• Experience securing and monitoring cloud environments such as Azure, GCP, or AWS, including onboarding cloud telemetry into a SIEM.
• Experience with detection-as-code practices, version control, and CI/CD pipelines for security content.
• Exposure to operational technology or industrial control system environments, ideally in energy, utilities, or manufacturing.
• Experience mentoring analysts or leading a shift, queue, or major incident bridge.
• Experience working with managed security service providers or global, follow-the-sun SOC models.
• Ownership and accountability, taking full responsibility for investigations, actions, and outcomes from start to finish.
• Strong decision-making under pressure, with a proven ability to weigh the relative costs and benefits of potential actions and select the most appropriate one.
• Influence and stakeholder engagement, with the ability to shape the opinions, plans, and behaviors of technical and business partners.
• Strong problem-solving, critical thinking, and troubleshooting skills applied to complex, incomplete, or conflicting evidence.
• Automation and continuous improvement mindset, consistently looking for ways to remove manual effort and strengthen controls.
• Business alignment, demonstrated through a clear understanding of Fluence's mission, values, and goals and consistent application of that knowledge.
• Collaboration and mentorship, establishing and maintaining effective working relationships and developing others on the team.