Cybersecurity Analyst

Role Overview The Cybersecurity Analyst is a hands-on operational role within the Cyber Operations team, responsible for frontline security monitoring, incident response support, exposure management validation, and compliance evidence.

Working under the direction of the Director, Cyber Operations and senior engineers, the Analyst is the execution layer of KLDiscovery 's security program monitoring what matters, responding when it counts, and keeping the team's operational processes running reliably.

This is a remote opportunity with a clear growth path toward Sr. Cybersecurity Analyst.

Key Responsibilities

Security Monitoring & Alert Triage Serve as first-line eyes on the environment validating and escalating CrowdStrike MDR-confirmed findings, reviewing MDR outputs, assessing context, and ensuring accurate internal escalation to the Engineers and Director Monitor security alerts from tools operating outside MDR scope Triage alerts for AI tool misuse, anomalous AI-related activity, and other emerging threat patterns as directed by the Security Manager Flag SIEM and identity health monitoring gaps, anomalies, and coverage issues to the engineering team — you are the first to notice when something looks wrong or missing Incident Response Support Serve as first-line support during security incidents like gathering evidence, documenting timelines, executing containment steps, and supporting the Security Manager through the full incident lifecycle Conduct initial technical investigations to identify root cause of intrusions, anomalies, or policy violations Maintain incident records, post-incident documentation, and lessons-learned notes to a standard that supports compliance evidence and future response improvement Participate in on-call rotation to ensure coverage outside core business hours for escalated MDR findings or active incidents Vulnerability & Exposure Management Support Monitor the CrowdStrike Falcon Exposure Management dashboard tracking open findings, flagg