Cyber Security Analyst
- ID
- 2024-12560
- Category
- Information Technology
- Position Type
- Employee
- Telecommute
- No
Position Summary
The Cyber Security Operations Center (CSOC) has an opening for a cyber security analyst which has two primary areas of responsibility. The first area being an analyst responding to security incidents and alerts, the second being a threat hunter.
Essential Responsibilities
This position will be focused on administration, updates, maintenance and automation of existing security tools and infrastructure, as well as working incidents as needed.
Core Duties:
- Responding to security incidents
- Create additional alerts for threats
- Tuning of security solutions
- Detection, monitoring, analysis, escalation of security incidents
- Network scanning and vulnerability assessments
- Train others on primary areas
- Stay up-to-date on security news
- Analyze network traffic and intrusion alerts; discern false positives
- Network scanning and vulnerability assessments
Identify and respond to threats to meet or exceed defined SLAs. Escalate as needed. See incident through to resolution and document the event.
Searching the environment for potential insider or advanced persistent threats and rogue devices.
Create and maintain appropriate standard operating procedures for the CSOC, including business continuity plans.
Cross-train others CSOC team members/other teams on primary areas of responsibility
Tuning of and responding to alerts generated or requests soliciting help from the CSOC.
Ensure operational readiness for any type of business continuity, disaster recovery or M&A event.
Work with CSOC and other teams to design, architect, consult and implement new security solutions and services.
Position Requirements
Education:
B.S. in Information Security or similar preferred;
Security related certifications a big plus: GCIH, GCFA, CEH, Security+, TCSE
Experience:
Minimum 2 year of hands on IT experience in a system administration (Windows/Linux mix)role, preferred 1 year cybersecurity experience.
Skills/Knowledge:
- Well versed in log analysis
- Familiar with common enterprise IT architectures
- IT administration experience
- Windows and Linux
- Windows/Linux hardening
- Network ports and protocols
- Vulnerability assessment tools (Nessus, Nmap)
- Scripting for automation (Python, PowerShell, APIs)
- Strong troubleshooting, reasoning, problem solving
- Endpoint and network security tools/techniques
- investigating AntiVirus or IDS alerts
- Demonstrated ability to write clear and concise technical documentation
- Ability to multi-task and change priorities with short notice
- High standard of professionalism and ethics