32 siem analyst jobs at 26 companies in Forest Park, IL
2mo
Save
Mark Applied
Hide
Security Analyst
Chicago or India
OnsiteFull Time
5+ YOE5+ years security analyst experience; SIEM/CrowdStrike exposure; experience with Abnormal and Microsoft 365 email security, Wiz CSPM, Microsoft Azure and AWS; scripting for automation; SOC2 familiarity; CompTIA Security+, CCSP/CCSK preferred; Bachelor's in Cybersecurity or equivalent.
SIEM, CrowdStrike Next-Gen, Abnormal, Microsoft 365 (M365), Wiz, Microsoft Azure, AWS, WAF, NGFW, VPC
1d
Save
Mark Applied
Hide
SOC Analyst
United States or Chicago
$124k-$161k/yr RemoteFull Time
3+ YOERequires 3–6 years of SOC or security analyst experience, enterprise SIEM expertise, detection-rule and query-language proficiency, scripting, cloud security knowledge, and eligibility for a US Federal Security Clearance.
Elastic SIEM, Splunk, Microsoft Sentinel, QRadar, KQL, Lucene, SPL, Python, Bash, PowerShell, AWS, GCP, Azure, MITRE ATT&CK, NIST, CIS, Tines, Claude, Gemini, AWS Bedrock, EDR, XDR
1mo
Save
Mark Applied
Hide
Security Analyst
Schaumburg or Chicago
$70k-$100k/yr HybridFull Time
Experience with SIEM, vulnerability assessments, network and application security concepts, familiarity with Okta, Microsoft Entra ID and Microsoft Intune; Bachelor's in related field or equivalent experience; Security+, Network+, or SSCP preferred.
SIEM, Okta, Microsoft Entra ID, Microsoft Intune
3mo
Save
Mark Applied
Hide
Threat Analyst (Chicago, IL, US)
Chicago, Illinois, United States
$98k/yr OnsiteFull Time
2+ YOEBachelor's in Computer Science or Information Security; 2+ years in cyber intelligence/threat hunting; experience with SIEM and automation; knowledge of MITRE ATT&CK and EDR tools.
SIEM, SOAR, EDR, CrowdStrike, Defender for Endpoint, Sophos, Splunk, Microsoft Sentinel, Elastic, Python, PowerShell, shell
2d
Save
Mark Applied
Hide
Threat Investigation Analyst
Downers Grove or Chicago or Springfield or Phoenix or Lansing or Grand Rapids or Milwaukee or Denver
$60k-$65k/yr HybridFull Time
1+ YOE1+ year security operations experience preferred; CompTIA Security+ required. Requires SIEM and security investigation experience, alert triage, security telemetry knowledge, CJIS compliance, communication skills, and a valid driver's license.
CompTIA Security+, SIEM, IDS/IPS, Cisco, Dell, VMware, Microsoft
2mo
Save
Mark Applied
Hide
Information Security Analyst
Krakow or Hyderabad or New York City or Chicago or London or Singapore or Hong Kong or Tokyo or United States or Europe or Asia
HybridFull Time
5+ YOE5+ years IT experience in information security; experience with firewall/IDS, SIEM, Linux, cloud (AWS/GCP), Fortinet and Firepower; risk and vulnerability assessment experience; bachelor's degree or equivalent; CCNA/CISSP/cloud security certs desirable.
IDS, Firepower IDS, Fortinet, SIEM, TCP/IP, Linux, Identity and Access Management (IAM), AWS, GCP, SANS, GIAC, COBIT, NIST
1d
Save
Mark Applied
Hide
Incident Response Analyst - Overnight Shift
Boston or New York City or Philadelphia or Cleveland or Richmond or Atlanta or Chicago or St. Louis or Minneapolis or Kansas City or Dallas or San Francisco
RemoteFull Time
3+ YOEBachelor's degree or equivalent experience and 3+ years relevant experience; incident response, SIEM/SOAR, forensics, threat analysis, IT infrastructure, communication, and analytical skills required.
SIEM, SOAR
2mo
Save
Mark Applied
Hide
Senior Information Security Analyst
Washington or Atlanta or Austin or Baltimore or Chicago or Virginia
$94k-$131k/yr HybridFull Time
7+ YOE7+ years in cybersecurity, Bachelor's in Information Security/Cybersecurity required, professional certs (e.g., CISSP, GIAC, SANS) preferred, SIEM/EDR/IDS/IPS and vendor tool experience, incident response and vulnerability management expertise.
Security Incident and Event Management (SIEM), Endpoint Detection and Response (EDR), Intrusion Detection/Prevention Systems (IDS/IPS), Microsoft Defender, CrowdStrike, Palo Alto Networks, malware sandbox, DNS, Active Directory, Exchange
1mo
Save
Mark Applied
Hide
CSOC CIR Tier II Analyst
Hines or Martinsburg or Austin
$79k-$110k/yr OnsiteFull Time
3+ YOE3+ years SOC incident response experience, Bachelor's in CS/IT/Cyber or equivalent, ability to obtain Tier 4/High Risk Background Investigation, required incident response certifications, experience with SIEM/EDR/SOAR and ServiceNow.
SIEM, EDR, SOAR, ServiceNow, Splunk, Microsoft Defender for Endpoint, PowerShell, KQL
1mo
Save
Mark Applied
Hide
Security Analyst I (Friday–Monday, 12am–11am CST)
Lombard or McLean or Shreveport or Overland Park
$49k-$70k/yr RemoteFull Time
1+ YOERequires 1–2 years of cybersecurity or 3–5 years of IT experience, EDR/SIEM exposure, ConnectWise Manage experience, English communication, and CySA+, GCIH, or SC-200 certification or pursuit.
ConnectWise Manage, SentinelOne, CrowdStrike, Microsoft Defender, Microsoft Sentinel, Windows Event Viewer, SIEM, EDR
3mo
Save
Mark Applied
Hide
Technical Incident Response Analyst - Hybrid (IL)
Elk Grove Village, Illinois, United States
$85k-$115k/yr HybridFull Time
3+ YOE3+ years incident response/security monitoring experience; hands-on SIEM, firewall, endpoint, IDS/HIDS, log analysis; Microsoft 365 proficiency; ability to document and communicate incident findings.
SIEM, Microsoft Defender, Kibana, Proficio, Microsoft 365, IDS, HIDS, NFS, ISCCI, CIFS
2mo
Save
Mark Applied
Hide
Cybersecurity Operation Analyst 25-E-03
Chicago or Springfield
$80k-$112k/yr OnsiteFull Time
3+ YOEBachelor's in CS/Info Systems/Information/Cybersecurity or related, minimum 3 years IT/security operations experience, familiarity with IPS/IDS, AV, anti-malware, UBA, DLP, MFA, proxies, SIEM, vulnerability management, Python/C/C++, plus communication and coordination skills.
IPS, IDS, AV, Anti-Malware, User Behavior Analytics, DLP, MFA, Network Proxies, Sensitive Data Scanning, Content Filtering, SIEM, Vulnerability management and remediation tools, Python, C, C++, Regular expressions
3w
Save
Mark Applied
Hide
Cybersecurity Analyst
Kenosha or Milwaukee or Chicago
OnsiteFull Time
1+ YOEBachelor’s degree or equivalent coursework, experience, or certification; 1–3+ years in IT; cybersecurity, enterprise networking, security tools, Microsoft 365, Azure, and incident response experience preferred.
Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Endpoint Detection and Response (EDR)/Host-based Intrusion Prevention System (HIPS)/Host-based Intrusion Detection System (HIDS), Data Loss Prevention (DLP), Network Intrusion Prevention System (NIPS)/Network Intrusion Detection System (NIDS), Microsoft 365, Microsoft Azure, CrowdStrike, Arctic Wolf, Proofpoint, CATO, Netwrix, NIST SP 800-53, ISO 27001, SOC 2, GDPR, PCI-DSS, SANS, Capture the Flag
3w
Save
Mark Applied
Hide
Cybersecurity Analyst
Kenosha or Milwaukee or Chicago
OnsiteFull Time
1+ YOEBachelor’s degree or equivalent experience, 1–3+ years in IT, enterprise network and security-tool knowledge, Microsoft 365/Azure familiarity, and cybersecurity operations experience preferred.
Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), IT Asset Management (ITAM), Incident Response Plan (IRP), Microsoft 365, Microsoft Azure, CrowdStrike, Arctic Wolf, Proofpoint, CATO, Netwrix, NIST SP 800-53, ISO 27001, SOC 2, GDPR, PCI-DSS, CySA+, SANS GSOC, SANS GCFA, SANS GCED, SANS GCIH, SSCP, SANS GSEC, CC, Security+, Net+, VPN, IdP, MFA, DLP, NIPS, NIDS, HIPS, HIDS, EMR
3w
Save
Mark Applied
Hide
Cybersecurity Analyst
Kenosha or Milwaukee or Chicago
OnsiteFull Time
1+ YOEBachelor's degree or equivalent experience, 1–3+ years in IT, enterprise network and security tool knowledge, Microsoft 365 and Azure familiarity, and cybersecurity compliance or operations experience preferred.
SIEM, EDR, SOC, ITAM, Microsoft 365, Azure, CrowdStrike, Arctic Wolf, Proofpoint, CATO, Netwrix, NIST SP 800-53, ISO 27001, SOC 2, GDPR, PCI-DSS, CySA+, SANS GSOC, GCFA, GCED, GCIH, SSCP, SANS GSEC, CC, Security+, Net+, VPN, IdP, MFA, DLP, NIPS, NIDS, HIPS, HIDS
15h
Save
Mark Applied
Hide
SOC Analyst
Oak Brook, Illinois, United States
$75k-$95k/yr OnsiteFull Time
1+ YOEHigh school diploma/GED required; 1+ year in networking and cybersecurity, 2+ years in cloud technologies, and experience with at least three listed security, networking, or troubleshooting tools.
Azure, Azure Stack, Azure Backups, AWS, EDR, SIEM, Microsoft Sentinel, Wireshark, IDS/IPS, Firewall, Windows, Linux, TCP/IP, FTP, HTTPS, SSH, Antivirus
3w
Save
Mark Applied
Hide
Lead Security Analyst
Minneapolis or Chicago
$90k-$132k/yr OnsiteFull Time
2+ YOE2–5 years security/GRC experience; knowledge of SOC 2, NIST, vendor assessments, security questionnaires, AI governance, and privacy (CCPA/GDPR). Strong writing, organization, and stakeholder collaboration skills.
Vanta, Drata, SIEM, EDR, M365, Google Workspace, Python
2d
Save
Mark Applied
Hide
DLP Senior Analyst - Purview
Chicago, Illinois, United States
$98k-$135k/yr HybridFull Time
5+ YOEBachelor's degree required with 5+ years in security engineering, compliance engineering, or data governance focused on Microsoft 365 and Microsoft Purview; strong regulatory compliance and data protection expertise required.
Microsoft Purview, Microsoft 365, Azure, Microsoft Information Protection, Microsoft Data Loss Prevention (DLP), Microsoft Insider Risk Management, Microsoft Records Management, Microsoft eDiscovery, Varonis, Digital Guardian, Cyberhaven, SIEM, SOAR
1w
Save
Mark Applied
Hide
Cyber Defense Analyst
Merrillville, Indiana, United States
OnsiteFull Time
3+ YOEBachelor's degree or equivalent experience, 3+ years in IT, cybersecurity, information security, risk, compliance, or audit, and an entry-level cybersecurity or networking certification.
SIEM, endpoint security, firewall, identity, vulnerability management, email security
1d
Save
Mark Applied
Hide
SOC Analyst I (Night Shift)
Schaumburg, Illinois, United States
$70k-$80k/yr OnsiteFull Time
Bachelor's degree in computer science, information technology, or information security, or 1+ year in security operations/cybersecurity. Requires U.S. citizenship, security clearance eligibility, and indefinite U.S. work authorization.
SIEM, Windows, Linux, Endpoint Detection and Response (EDR)
Explore Jobs