Sr. Cybersecurity Analyst

Sr. Cybersecurity Analyst

Requirements

• Understanding of general enterprise network and system components and their roles (databases, webservers, app servers)
• Familiarity with network and application protocols (TCP/IP, HTTP, TLS, SSH, DNS, etc.)
• Experience working with servers or workstations running Windows, Linux, or OS X
• Experience working with security tools such as EDR, SOAR, SIEM, Email Security, etc.
• Experience in phishing and malware analysis.
• Strong knowledge of cybersecurity concepts and emerging threats
• Excellent written and oral communication skills
• Strong work ethic with attention to detail
• Strong analytical and problem-solving skills
• Ability to work independently on complex threat analysis and alert triage while maintaining accuracy and efficiency.
• Ability to excel in a fast paced and rapidly changing environment

Responsibilities

• Proactively monitor tools, feeds, and dashboards for security alerts
• Identify and triage alerts from internal systems and respond to alerts from managed SOC
• Follow established process while responding to incidents and preparing reports
• Help to identify opportunities for improvement and make recommendations.
• Provide technical guidance and assistance to other team members, fostering knowledge sharing and skill development within the team.
• Provide input to and report on metrics for alerts, incidents, responses, and operations.
• Work closely with multiple groups and business units globally to provide guidance and support
• Work closely with internal stakeholders and managed security partners to respond to alerts and incidents and escalate as necessary
• Stay current with continually changing threat landscape and defensive capabilities
• Conduct proactive threat hunting leveraging threat intelligence to proactively identify, investigate, and remediate emerging security threats across the organization.
• Participate in purple team exercises, combining offensive and defensive tactics to strengthen the organization’s security posture, enhance threat detection and improve incident response capabilities.
• Identify and triage vulnerabilities, determining their scope and potential impact, and prioritizing them based on severity to guide effective and prompt remediation efforts.
• Collaborate closely with the Security Engineering team to enhance automations and workflows, develop new detection capabilities, and identify areas for improvement in security processes and tools.

Preferred Qualifications

• 3+ years of experience working hands on with technology.
• 3+ years of experience in a cybersecurity focused role with hands-on experience in incident response.
• GIAC, (ISC)2, or other relevant security certifications a plus.