Cyber Security Analyst

Role Overview

The Cyber Security Analyst plays a crucial role in safeguarding Specialized by continuously monitoring security events, analyzing findings, aiding incident responses, and collaborating with teams to mitigate risks. This position transforms security alerts, vulnerabilities, and tool outputs into actionable strategies, ensures thorough resolution, and assists teams in effectively utilizing security technologies. Ideal candidates are inquisitive, methodical, capable of technical investigation, and adept at communicating risk in pragmatic business terms.

Key Responsibilities

• Observe security alerts spanning endpoints, identity management, emails, networks, cloud environments, applications, and data protection tools.
• Conduct initial analysis of suspicious activities, confirm findings, collect evidence, document outcomes, and escalate incidents based on assessed risk and impact.
• Collaborate with global technology and business units to interpret security insights, clarify relevant concerns, agree on feasible remediation, and oversee issue resolution.
• Lead and support security initiatives including preventive security measures, establishing security baselines, enhancing vulnerability management, and strengthening system defenses.
• Assess outputs from vulnerability scans, configuration reviews, penetration testing, and bug bounty programs to verify severity, ownership, remediation progress, and providing proof of fixes.
• Assist in incident response by defining scope, documenting timelines and actions, coordinating containment, and participating in post-incident reviews.
• Operate and enhance security tools by evaluating coverage, refining alerts, ensuring data integrity, documenting processes, and identifying improvement areas.
• Respond to team security inquiries related to suspicious communications, access issues, data protection incidents, and security policy clarifications.
• Develop and update clear runbooks, investigation records, dashboards, metrics, and recurring reports to illustrate risk, trends, progress, and pending actions.
• Contribute to control assessments, audits, access reviews, security awareness campaigns, and other cybersecurity program activities as necessary.

Success Indicators

• Ownership of initial incident response including triage, coordination of containment, escalation, documentation, and issue closure.
• Clear communication of risks, priorities, and expected responses without excessive technical jargon.
• Active management and completion of remediation and security improvement projects.
• Effective deployment of security tools with gradual reduction of false positives and operational gaps.
• Leadership’s reliable access to critical risk information, trend analysis, impediments, and risk mitigation advances.

Qualifications and Experience

• At least 5 years’ experience in cybersecurity operations, analysis, incident response, vulnerability management, IT operations, or similar areas.
• Familiarity with core security domains including endpoint security, identity management, email security, network protection, application security, vulnerability assessment, and data privacy.
• Knowledge of cloud platforms such as AWS, Microsoft Azure, and Oracle Cloud Infrastructure (OCI).
• Proven capability in analyzing alerts, logs, and tool outputs to derive actionable documentation.
• Expertise in investigating ambiguous threats, correlating multi-source evidence, and making informed risk-based escalation decisions.
• Experience leading cross-functional security projects with coordination and completion oversight.
• Exemplary organizational skills as well as strong written and verbal communication abilities.
• A practical and service-oriented mindset with eagerness to collaborate and resolve security challenges.

Preferred Skills

• Hands-on experience with security monitoring, endpoint detection and response (EDR), Security Information and Event Management (SIEM), email security, cloud security, vulnerability management, and data protection tools.
• Competence in incident investigation, threat hunting, vulnerability verification, system hardening, and access control audits.
• Knowledge of Microsoft Entra ID, SaaS security management, prevalent enterprise operating systems, and network infrastructure.
• Capability to create dashboards, reports, standard operating procedures, and automate routine security tasks.
• Relevant certifications such as Security+, Cybersecurity Analyst (CySA+), GSEC, or equivalent practical expertise.
• Interest in responsibly leveraging AI and automation to enhance investigation effectiveness and reduce repetitive workload.

Working Culture

The cybersecurity team at Specialized functions with shared responsibility, offering support in monitoring, investigation, policy guidance, and risk transparency. Business and technology owners retain accountability for their systems, data, remediation, and risk acceptance. Success hinges on establishing trust, simplifying findings, and enabling teams to translate security detections into tangible risk reduction.

Role Focus

This analyst role prioritizes monitoring, investigation, validation, project coordination, communication, and operational follow-through rather than security engineering. It supports proactive security enhancements, makes improvement recommendations, and aids implementations, with the central value being the conversion of security signals into clear, completed actions.

Diversity and Inclusion

Specialized is dedicated to fostering a diverse and inclusive workplace that supports all identities and encourages applications from underrepresented groups. They welcome individuals eager to contribute creatively and passionately to their mission of advancing cycling globally, inviting all qualified candidates ready to make an impact to apply.