Associate Cybersecurity Analyst | Early Career

The Opportunity

• Security Monitoring & Alert Triage
• Review alerts in MDR/SOC tooling. Identify false positives and escalate suspicious activity to the Cybersecurity Operations Engineer per defined runbooks.
• Monitor security dashboards during assigned windows. Document findings clearly for handoff and maintain accurate alert disposition records.
• Support the development and refinement of triage runbooks as you build environment familiarity.
• Vulnerability Management
• Run scheduled vulnerability scans across defined asset groups. Validate and categorize findings under guidance.
• Track remediation progress and update the vulnerability register. Flag overdue patch management SLAs for escalation and help generate leadership reports.
• Incident Response Support
• During active incidents, gather requested evidence, document timelines, and support investigation tasks under direct guidance.
• Maintain IR documentation: logs, timelines, and post-incident notes. Participate in tabletop exercises as observer and note-taker.
• GRC & Compliance Support
• Collect and organize audit evidence for SOC 2 and ITGC activities. Complete control checklists accurately and on schedule under GRC Analyst direction.
• Support client security questionnaire responses by gathering documentation and evidence from internal systems.
• Aid in policy attestation tracking, vendor risk register updates, and NIST CSF remediation documentation.
• Documentation & Security Awareness
• Support KnowBe4 campaign administration: track completion rates, pull reporting data, and flag non-completion for follow-up.
• Maintain accurate documentation of completed tasks, findings, and escalations. Use AI tools to accelerate documentation and draft initial content for senior review.

About This Role at Momentum

As an Associate Cybersecurity Analyst on our Cybersecurity team at Momentum, your days will be dynamic and filled with opportunities to contribute to our mission. Here's a glimpse into what your overall responsibilities might look like:

Qualifications

• Graduated in Winter 2025 or Spring 2026 with a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Foundational understanding of cybersecurity concepts: CIA triad, common attack types, network fundamentals, and basic security controls.
• Exposure to GRC concepts - SOC 2, NIST CSF, or compliance frameworks - through coursework, certification study, or internship.
• Strong written communication. You document clearly and completely.
• Active daily use of AI tools - at Momentum, we have 100% internal AI adoption.
• Genuine curiosity about security: threat news, home labs, security blogs.

PREFERRED CERTIFICATIONS

• Security+ or equivalent entry-level certification: CompTIA Security+, Google Cybersecurity Certificate, or similar.

PREFERRED TECHNICAL EXPERIENCE

• Hands-on experience with SIEM platforms, vulnerability scanners, or MDR tooling through coursework, labs, or CTF competitions.
• Exposure to CrowdStrike, Okta, Jamf, or similar enterprise security tooling.
• Basic scripting or automation in Python, Bash, or PowerShell applied to a security or IT task.
• Internship or co-op experience in IT, security operations, or GRC.

Commitment to Diversity and Inclusion at Momentum

We recognize diversity and inclusion as key components of our company's success and growth. Recognizing the ongoing journey ahead, we are determined to make lasting impacts through the collective efforts of our Leadership team, People & Culture team, and every employee.

Total Rewards

We are committed to supporting our people in every moment that matters on their journey with us! We are pleased to offer a comprehensive total rewards package designed to provide protection, peace of mind, and a focus on overall well-being while helping our people plan for the future.