Cyber Security Analyst (Tier 2)

View full description

Requirements:

• Minimum of 3 years’ experience in Threat Analysis and Threat intelligence
• At least 2 years' experience working in a SOC
• First-hand working experience with industry leading SIEM/SOAR tooling/providers
• Prior experience with Sumo Logic, Google Chronicle, Azure Sentinel is a strong plus
• Advanced understanding of query languages
• Working Kusto (KQL) knowledge is a plus
• Networking experience (TCP/IP, Routing, RFC 1918, VPN/Zero-Trust Networking)
• Strong experience with Office 365 / Entra ID Ecosystems
• GCC-High Experience is a plus
• Possess strong troubleshooting, problem-solving, and verbal/written communication skills
• Excellent communication skills to communicate with support personnel, customers, and managers
• Demonstrated ability to work in a team environment
• Must be a U.S. Citizen and reside within the United States or its Territories

Responsibilities:

• Analyze, respond, document and report on potential security incidents identified in customer environments
• Work with partners to maintain an understanding of security threats, vulnerabilities, and exploits that could impact systems, networks, and assets
• Serve as an incident coordinator for security events that require urgent response, containment, and remediation
• Develop and maintain Security tooling playbooks/runbooks
• Continuously review and optimize existing technical processes, configurations, rulesets, technologies
• Provide analysis on various security enforcement technologies including, but not limited to SIEM, anti-virus, content filtering/reporting, malware prevention, firewalls, intrusion detection systems, web application firewalls, messaging security platforms, vulnerability scanners etc.
• Actively research current threats and attack vectors being exploited in the wild
• Actively work with associate analysts and perform investigations on escalations
• Ability to discuss security posture with multiple clients and make recommendations to better their holistic security approach