Senior Security Operations Analyst

View full description

Requirements:

• 4+ years of experience in a similar role with web technologies and information security.
• At least 2 years working in a senior role.
• Self-motivated with minimal oversight but knows when to seek guidance.
• CISSP certification or other relevant certifications.
• Extensive incident management experience from detection to remediation.
• Experience with incident management tools like OneTrust.
• Deep understanding of AWS security tools and processes.
• Experience with Elastic SIEM and Endpoint Detection and Response.
• Knowledge of attacker TTPs (e.g., MITRE ATT&CK).
• Strong decision-making and communication skills.
• Experience in building strategies for incident response teams.

Responsibilities:

• Defend against cybersecurity incidents and contain incidents as they occur.
• Validate and maintain incident response plans and processes to address potential threats.
• Conduct network monitoring, intrusion detection analysis, and log-based threat detection.
• Deploy and manage cloud-centric detection for threats related to cloud environments.
• Work with the SIEM system to correlate activity and identify anomalous patterns.
• Research emerging threats and vulnerabilities.
• Create runbooks for frequently occurring incidents to automate or assist with resolution.
• Provide users with incident response support, including mitigating actions and forensics facilitation.