{"id":2270791,"url":"https://alion.io/job/fls-cyber-security-analyst","title":"Cyber Security Analyst","company":{"id":2724231,"name":"FLS","domain":"fls.com","url":"https://alion.io/company/fls-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":81000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":613},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"ServiceNow","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Azure","optional":true},{"name":"ITSM","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:00:00Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-12T00:31:27Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"We are seeking an experienced Cyber Security Analyst professional to support and enhance our global security operations. The role is responsible for continuous monitoring, incident response, threat investigation, vulnerability management, endpoint compliance and security reporting across the enterprise environment\nThis is a shift-based hybrid role with office presence, requiring coverage across a 24x5 operational model and support for Cyber Security Operations and services, with occasional after-hours activities for complex changes or critical tasks.\nJOB Responsibilities\nProvide L2 Cyber support by handling escalations from users via ServiceNow, Awareness campaign, Phishing, performing monitoring activities, troubleshooting and resolution.\nTake ownership of complex incidents, ensuring timely resolution within agreed SLAs\nPerform in-depth diagnostics and root cause and remediation action.\nProvide 24x5 security monitoring support and participate in weekend/On-Call rotations.\nEnsure timely detection, triage and response to security incidents.\nPerform deep-dive investigations for Critical and High Priority security incidents.\nLead critical incident response activities and coordinate stakeholder communications.\nWork closely with Infrastructure, Network, Cloud and Application teams to drive issue resolution.\nTrack remediation activities and ensure closure within agreed SLAs\nMonitor Microsoft Defender compliance across Windows Server , Endpoints and Linux servers.\nIdentify non-compliant assets and coordinate remediation efforts.\nSupport endpoint security policy implementation and enforcement.\nAnalyse phishing alerts and suspicious emails, perform email header analysis and determine threat indicators.\nKnowbe4 awareness recommend and implement appropriate containment and user awareness actions.\nConduct advanced threat investigations using Cisco Umbrella to perform URL analysis, Smart Search investigations, blacklist management and threat hunting activities and other security tools.\nIdentify malicious domains, indicators of compromise (IOCs) and emerging threats.\nManage vulnerability remediation activities using Tenable and related platforms.\nTrack CVEs, Out-of-Band (OOB) patches and third-party software vulnerabilities.\nCoordinate Patch deployment Compliance with relevant tower and validate remediation effectiveness.\nSupport vulnerability risk assessments and reporting to each group.\nDevelop and maintain monthly security dashboards and compliance reports..\nDrive incident resolution end-to-end, including coordination with L3 teams, vendors and external providers.\nReview, validate and execute non-standard and complex operational changes following change management processes.\nParticipate actively in major incident management, including technical bridge calls when required\nEnsure problem management activities, including identifying recurring issues and driving permanent fixes.\nRemote support and endpoint troubleshooting Security issue.\nMaintain and improve Operational documentation, runbooks, troubleshooting guides and knowledge base articles\nContribute to service improvement initiatives, automation opportunities and operational efficiency.\nJob Qualifications:\nBachelor’s degree in computer science, Information Technology, Cybersecurity or a related field.\n3-5 years of hands-on expertise in IT Operations and Cybersecurity analysis.\nRelevant certifications (e.g., CompTIA Security+, CCSP, CISSP, CEH, GIAC certifications) are a plus.\nStrong understanding of network protocols, operating systems (Windows, Linux) and cloud environments (Azure, OCI)\nMicrosoft Defender for Endpoint, SIEM Platforms.(Microsoft Sentinel, Cisco Umbrella, Defender for Linux, beyond trust privilege management and Identity management )\nEndpoint Security - Security Event Analysis , Log Correlation, Malware Analysis and IOC Investigation.\nProven experience in handling complex incidents and escalations\nServiceNow or similar ITSM platforms\nAbility to work independently and take technical ownership\nExcellent communication and stakeholder management skills\nAbility to perform under pressure in a high-availability enterprise environment\nStrong analytical and problem-solving skills\nAnnual base pay: 145,000 Ron - 190,000 Ron\nWe offer all employees access to a dedicated recognition platform, empowering you to celebrate achievements, share appreciation and stay connected globally.","description_format":"text","description_chars":4405,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Romania","iso":"RO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Mining","Information Security","Petroleum & Mining Engineering"],"lifecycle":[{"event":"open","at":"2026-10-11T07:25:47Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.8,"p_room":0.75,"age_days":12,"expected_fill_days":17,"reasons":["conf:0","win:late"],"computed_at":"2026-10-12T00:49:43Z"},"pay":null,"html_url":"https://alion.io/job/fls-cyber-security-analyst","json_url":"https://alion.io/job/fls-cyber-security-analyst.json","meta":{"generated_at":"2026-10-12T00:49:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":597,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2724231},"rest":"https://alion.io/mcp/rest/get_company?id=2724231"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffls-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffls-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffls-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fls-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffls-cyber-security-analyst"}]}