Cyber Security Analyst

Winsupply is in the business of creating and enabling entrepreneurs to achieve their dreams through wholesale distribution. Winsupply is a group of over 670 locally-owned companies that operate across a variety of industries, including HVAC, Plumbing, Electrical and more. The purpose of the support services campus is to eliminate obstacles and provide support to help our entrepreneurs succeed. Support service employees assist entrepreneurs in achieving their dreams through finance, accounting, IT, and other back-office operations.

Job Description

Winsupply is seeking a motivated and detail-oriented entry-level Cyber Security Analyst to join our growing security team. In this role, you will be on the front lines of our defense, helping to protect our company's digital assets from cyber threats. You'll focus on safeguarding our endpoints, managing system and application patching, and responding to security incidents. This is a fantastic opportunity for someone passionate about cybersecurity to launch their career with a dynamic and supportive company. 

Accountabilities/Responsibilities

• Endpoint Security: You'll monitor, manage, and maintain our endpoint security solutions (like antivirus and EDR tools) to protect laptops, servers, and other devices from malware and unauthorized access.
• Vulnerability & Patch Management: A key part of your job will be to identify, prioritize, and remediate vulnerabilities by deploying patches for operating systems (Windows, Linux, OSX) and various applications in a timely manner.
• Incident Response: When security alerts arise, you'll be one of the first responders. You will need to understand the importance of following established incident response playbooks to investigate, contain, and resolve security incidents efficiently.
• Security Monitoring: You will assist in monitoring our security information and event management (SIEM) system and other security tools to detect and analyze potential threats.
• Documentation: You'll help create and maintain documentation for security processes, procedures, and incident reports.

Competencies for Success

• A strong, foundational understanding of cybersecurity principles, including networking, operating systems, and common attack vectors.
• Demonstrable skills in endpoint security , including experience with antivirus software, endpoint detection and response (EDR), and host-based firewalls.
• Solid knowledge of operating system and application patching processes and the importance of timely vulnerability remediation.
• A fundamental understanding of incident response methodologies and the critical need to follow predefined playbooks and procedures during a security event.
• Excellent problem-solving skills and a keen eye for detail.
• Strong communication skills, both written and verbal.
• A passion for learning and a desire to grow within the cybersecurity field.

Qualifications

• An associate or bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent hands-on experience.
• Relevant industry certifications such as CompTIA Security+, Network+, or (ISC)² SSCP.
• Familiarity with common security frameworks (e.g., CISv8 Framework).
• Basic scripting skills (e.g., PowerShell, Python) are a plus.
• Experience with vulnerability scanning tools (e.g., Nessus).

Additional Information

Physical Demands

• Regularly required to stand, walk, bend, kneel, crouch, crawl, and climb ladders or lifts.
• Must be able to lift and move objects up to 25 pounds frequently and over 100 pounds occasionally.
• Ability to work in confined spaces, ceilings, crawl spaces, and outdoor environments.
• Use of hand tools, power tools, and installation equipment daily.
• Must be able to wear appropriate personal protective equipment (PPE) per safety regulations.

We are committed to inclusion, diversity, and equal employment opportunity, regardless of race, color, ancestry, religion, sex, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status, or any other factor protected by applicable federal, state, or local laws.