Cyber Security Analyst

Cyber Security Analyst About the Role The Cyber Security Analyst helps protect Specialized by monitoring security activity, reviewing findings, supporting incident response, and working directly with teammates to reduce risk. This role turns alerts, vulnerability data, control gaps, and tool output into clear actions, follows issues through resolution, and helps teams use security tooling effectively. The ideal candidate is curious, organized, comfortable investigating technical issues, and able to explain risk in practical business terms. What You Will Do • Monitor security alerts and events across endpoint, identity, email, network, cloud, application, and data-protection tooling. • Triage and investigate suspicious activity, validate findings, gather supporting evidence, document conclusions, and escalate issues based on risk and impact. • Partner with Global Technology and business teammates to review security findings, explain what matters, agree on practical remediation steps, and track work through closure. • Help lead security-related projects with teams across Global Technology to strengthen proactive security, establish and improve security baselines, advance vulnerability management, and support system-hardening efforts. • Review vulnerability, exposure, configuration, penetration-test, and bug-bounty findings; help validate severity, ownership, remediation status, and evidence of resolution. • Support cybersecurity incident response by helping determine scope and impact, documenting timelines and actions, coordinating containment tasks, and contributing to post-incident follow-up. • Help operate and improve security tools by reviewing coverage, tuning alerts, validating data quality, documenting workflows, and identifying gaps or opportunities for better use. • Respond to security intake from teammates, including suspicious messages, access concerns, data-protection events, and questions about approved security practices. • Create and maintain clear runbooks, investigation notes, dashboards, metrics, and recurring reports that show risk, trends, progress, and open actions. • Contribute to control reviews, audits, access reviews, security awareness activities, and other cybersecurity program priorities as needed. What Success Looks Like • The analyst acts as a cybersecurity first responder, owns initial response through triage, containment coordination, escalation, documentation, and follow-through to closure. • Teammates understand the risk, expected action, and priority without unnecessary technical complexity. • Remediation and proactive security projects are actively driven through validation and closure. • Security tools provide useful coverage and actionable output, with noise and operational gaps improved over time. • Leadership has reliable visibility into material risks, recurring trends, blockers, and risk-reduction progress. What You Need to Win • Minimum 5 years of experience in cybersecurity operations, security analysis, incident response, vulnerability management, IT operations, or a related role. • Working knowledge of core security concepts across endpoint, identity, email, networking, applications, vulnerabilities, and data protection. • Knowledge of cloud computing environments, including AWS, Microsoft Azure, and OCI. • Experience reviewing alerts, logs, findings, or security-tool output and turning the results into documented actions. • Ability to investigate ambiguous issues, connect evidence from multiple sources, and make sound risk-based decisions about escalation and next steps. • Ability to help lead cross-functional security projects, coordinate owners and dependencies, and drive work through completion. • Strong organizational, follow-through, written, and verbal communication skills. • A practical, service-oriented mindset and willingness to collaborate with teammates to solve problems rather than simply report them. Preferred Qualifications / Experience • Experience with security monitoring, endpoint detection and response, SIEM, email security, cloud security, vulnerability management, data protection, or Atlassian platforms. • Experience supporting incident investigations, threat hunting, vulnerability validation, system hardening, or access reviews. • Familiarity with Entra ID, SaaS security, common enterprise operating systems, and network technologies. • Experience creating dashboards, reports, playbooks, or simple automations that improve day-to-day security operations. • Relevant certifications such as Security+, CySA+, GSEC, or equivalent practical experience. • Interest in using AI and automation responsibly to improve investigation quality and reduce repetitive work. How We Work Cybersecurity at Specialized operates through shared accountability. The Cybersecurity team provides monitoring, investigation, standards, guidance, and risk visibility, while technology and business owners remain responsible for their systems, data, remediation decisions, and accepted risk. This role succeeds by building trust, making findings understandable, and helping teammates move from issue identification to measurable risk reduction. Role Character This is an analyst role, not a dedicated security engineering position. The emphasis is on monitoring, investigation, validation, project coordination, communication, and operational follow-through. The role helps lead proactive security and hardening efforts, recommends tool or control improvements, and supports implementation, while its primary value remains turning security signals into clear decisions and completed actions. We want to increase representation of all races, genders, and body types in the cycling industry and are committed to building a diverse and inclusive workforce where all people thrive. We encourage everyone – especially those from marginalized groups – to apply to our job postings and help us earn the position as the rider’s brand of choice. We are al…