Cyber Security Analyst

Winsupply is in the business of creating and enabling entrepreneurs to achieve their dreams through wholesale distribution. Winsupply is a group of over 670 locally-owned companies that operate across a variety of industries, including HVAC, Plumbing, Electrical and more. The purpose of the support services campus is to eliminate obstacles and provide support to help our entrepreneurs succeed. Support service employees assist entrepreneurs in achieving their dreams through finance, accounting, IT, and other back-office operations.

Winsupply is seeking a motivated and detail-oriented entry-level Cyber Security Analyst to join our growing security team. In this role, you will be on the front lines of our defense, helping to protect our company's digital assets from cyber threats. You'll focus on safeguarding our endpoints, managing system and application patching, and responding to security incidents. This is a fantastic opportunity for someone passionate about cybersecurity to launch their career with a dynamic and supportive company. 

Accountabilities/Responsibilities 

• Endpoint Security: You'll monitor, manage, and maintain our endpoint security solutions (like antivirus and EDR tools) to protect laptops, servers, and other devices from malware and unauthorized access.
• Vulnerability & Patch Management: A key part of your job will be to identify, prioritize, and remediate vulnerabilities by deploying patches for operating systems (Windows, Linux, OSX) and various applications in a timely manner.
• Incident Response: When security alerts arise, you'll be one of the first responders. You will need to understand the importance of following established incident response playbooks to investigate, contain, and resolve security incidents efficiently.
• Security Monitoring: You will assist in monitoring our security information and event management (SIEM) system and other security tools to detect and analyze potential threats.
• Documentation: You'll help create and maintain documentation for security processes, procedures, and incident reports.

Competencies for Success

• A strong, foundational understanding of cybersecurity principles, including networking, operating systems, and common attack vectors.
• Demonstrable skills in endpoint security, including experience with antivirus software, endpoint detection and response (EDR), and host-based firewalls.
• Solid knowledge of operating system and application patching processes and the importance of timely vulnerability remediation.
• A fundamental understanding of incident response methodologies and the critical need to follow predefined playbooks and procedures during a security event.
• Excellent problem-solving skills and a keen eye for detail.
• Strong communication skills, both written and verbal.
• A passion for learning and a desire to grow within the cybersecurity field.

• An associate or bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent hands-on experience.
• Relevant industry certifications such as CompTIA Security+, Network+, or (ISC)² SSCP.
• Familiarity with common security frameworks (e.g., CISv8 Framework).
• Basic scripting skills (e.g., PowerShell, Python) are a plus.
• Experience with vulnerability scanning tools (e.g., Nessus).

Physical Demands

The physical demands here are representative of those that must be met to successfully perform the essential job functions:

• Sitting for extended periods of time
• Dexterity of hands and fingers to operate a computer keyboard, mouse, power tools, and other computer components
• Lifting and transporting of moderately heavy objects, such as computers and peripherals

We are committed to inclusion, diversity, and equal employment opportunity, regardless of race, color, ancestry, religion, sex, gender, national origin, sexual orientation, age, citizenship, marital status, disability, veteran status, or any other factor protected by applicable federal, state, or local laws.