Skip to content
Book a demo

Hire a Cybersecurity Analyst.

Alerts triaged, vulnerabilities tracked, evidence kept.

Also called: SOC Analyst, Security Analyst, Information Security Analyst

From US$7.50 an hourUS$7.50-33/hr

  • IT & managed services
  • Financial services
  • Healthcare
Book a demoTalk now on Teams

A free 15-minute call on Teams.

  • Works your hours
  • Colombia hub, on New York time or an hour behind
  • Month to month
What your Cybersecurity Analyst gets doneSample day
  • Works the alert queue in Microsoft Sentinel, Defender XDRMonitoring and alert triage
  • Investigates reported phishing and business email compromiseIncident investigation and response support
  • Runs and reviews scans in Nessus, Qualys, Rapid7 InsightVM or OpenVASVulnerability management
  • Collects and maps evidence to Essential Eight maturity levelsCompliance and evidenceDoing
In your tools
  • Microsoft Sentinel
  • Microsoft Defender XDR
  • Microsoft Defender for Office 365
  • Microsoft Entra ID Protection
  • Splunk
  • Elastic Security

Pick the level. See the price.

US$12.50an hourFull time, 38 hours a week, all-in

Level 2 of 4, also called mid-level.Recommended
Even a local mid-level admin costsUS$22.86/hr
A tested Intermediate Cybersecurity AnalystUS$12.50/hr
At least 45% lessBasis: a Seat's hourly price against the hourly wage of a comparable local hire at the same level. Benefits and payroll taxes would add to the local cost.

Investigates incidents end to end at Tier 2.

  • Incident investigation reports
  • KQL or SPL query library
  • Prioritized vulnerability reports

2-4 years as a SOC analyst or security analyst, with SC-200, CySA+ or equivalent experience.

How the Intermediate level works

Per hour, all-in: recruiting, testing and management.

What you hand to your Cybersecurity Analyst

Tasks

  • Monitoring and alert triage

    • Works the alert queue in Microsoft Sentinel, Defender XDR
    • Enriches indicators using VirusTotal, URLScan and AbuseIPDB, decide true
    • Tunes detection rules and suppress known-benign noise

  • Incident investigation and response support

    • Investigates reported phishing and business email compromise
    • Contains confirmed threats under the client's approval matrix
    • Builds incident timelines

  • Vulnerability management

    • Runs and reviews scans in Nessus, Qualys, Rapid7 InsightVM or OpenVAS
    • Prioritizes findings by severity, exploitability
    • Verifies fixes with re-scans

  • Compliance and evidence

    • Collects and maps evidence to Essential Eight maturity levels
    • Maintains the risk register and policy review calendar

  • Awareness and posture review

    • Designs and runs phishing simulations and short training
    • Reviews Microsoft Secure Score, MFA coverage, admin roles

Tested before you meet them

  1. Security Fundamentals TestAll levels40 min
  2. Alert Triage SimulationAll levels45 min
  3. Phishing and Business Email Compromise InvestigationAll levels45 min
  4. Log Query ExerciseIntermediate and up45 min
  5. Vulnerability Prioritization CaseAll levels40 min
  6. Framework Mapping and Executive BriefIntermediate and up60 min

One score on every profileSample shown

84%

Three checks before your shortlist

  • Skills tested: A skills test for the role, marked by a senior
  • English and comms: written English tested, spoken English checked on a call
  • ID, work history and references: photo ID, past roles and two referees

From booked call to day one

  1. Step 1: Book a demo

    Tell us the role, your hours and your tools.

  2. Step 2: Meet your shortlist

    Their level and hourly price, tested before you meet.

  3. Step 3: Pick your person

    Month to month. We handle the contract, the equipment and the onboarding, and make sure it all runs.

  4. Step 4: They start work

    In your tools, within 12 to 48 hours of a successful interview.

Questions answered

An Intern Cybersecurity Analyst is US$7.50 an hour, Intermediate US$12.50, Expert US$19 and Specialist US$33, full time (38 hours a week). That is all-in: recruiting, testing and management, month to month.

Monitoring and alert triage, incident investigation and response support, vulnerability management and compliance and evidence, run to your priorities. You choose what they own first.

Six practical tests, marked by a senior, including security Fundamentals Test, alert Triage Simulation and phishing and Business Email Compromise Investigation. You see the score before you meet.

Tell us and we replace them free, with a new shortlist of tested people to meet. Seats are month to month with 30 days' notice.

More questions

Within 12 to 48 hours of a successful interview. First you meet your shortlist, interview the people you like and pick your person.

Yes. Your Cybersecurity Analyst works your business hours in your time zone and joins your Teams or Slack like anyone else. The hub matched to United States clients is in Colombia, on New York time or an hour behind.

Yes, where it helps. Your Cybersecurity Analyst works in the AI tools you already use. They use AI for first drafts and routine work, check every output, and follow your AI policy. You can ask for no AI on any task.

An Intermediate Cybersecurity Analyst investigates incidents end to end at Tier 2. An Expert Cybersecurity Analyst leads investigations of medium-severity incidents and designs and tunes detection use cases. We usually recommend Intermediate.

It stays under your rules: your admin settings and AI policy apply. Our talent rules ban client data in personal or free AI accounts, and passwords, card numbers, health details and ID numbers never go into any AI tool.

You direct the work day to day. We handle recruiting, equipment and quality checks.

Yes. Every Cybersecurity Analyst is tested live in the tools on your job description, such as Microsoft Sentinel and Microsoft Defender XDR, before you meet them.

In week one: approval matrix and escalation contacts; incident response plan, playbooks and case-management or PSA seat; and written authorization for every vulnerability scan target range. You agree the first priorities with them on day one.

Yes. It's also called SOC Analyst, Security Analyst and Information Security Analyst. Same tasks, tests and prices, whatever the name.

Their written English, with a scored test, and their spoken English, on a call with us. We also check their ID, work history and references.

Yes. You meet your shortlist on a short call and pick the person you want. Nobody joins without your yes.

In our talent hubs in the Philippines, Vietnam, Kenya, Nigeria, Brazil and Colombia, and we hire from 60+ countries. Wherever they are, they work your hours.

Pay only for the hours they work. All your Seats are on one bill, and Studio plans are billed monthly.

It can, at most once a year. Your person's hourly rate may rise by up to 5% a year, from the first anniversary of the Seat's start, with 60 days' notice and the right to end the Seat before it applies.

Only when you and your person both agree to it in advance. Otherwise they work the hours you set, and you pay for the hours they log.

You aren't charged for hours your person doesn't work, apart from paid leave. After their third month, your person earns 8 hours of paid leave a month. Paid leave hours are charged at their usual rate.

Your person logs their hours each day in the Get Hands client app, where you can see them. Your next invoice is adjusted to those hours.

Yes, with no minimum hours. From 20 to 37 hours a week, the hourly rate is 10% higher than full-time. Under 20 hours, it's 20% higher.

Yes. Tell us the roles on a call and we shortlist tested people for each.

Yes. You give them access in your own systems, and you can change or remove it at any time.

They get their own login in each of your systems, never a shared one. Any password that has to be shared goes through your own password manager, never email, chat, code or prompts.

A tested shortlist within 72 hours of your call, or your first week is free. That's part of The Right Hands Guarantee.

Yes. Book a 15-minute demo any time, or choose Talk now on the booking form for a Microsoft Teams link straight away. You can also message us on WhatsApp on +61 485 061 086, or email hello@gethands.com.au.

Book a 15-minute demo on Microsoft Teams, any time, day or night. We show you the people, levels and prices that fit. No obligation.

Meet the people who fit your work.

A 15‑minute call on Teams. You leave knowing the level you need and its hourly price.

Book a demoTalk now on Teams

Talk now is live on Teams, any time.