The Cybersecurity Analyst is responsible for monitoring and defending our customers' environments within a 24/7 Security Operations Center (SOC). This role investigates security alerts, analyzes potential threats, and supports incident detection and response activities to protect systems, networks, and data. The analyst works closely with other SOC team members and internal teams to identify suspicious activity, escalate incidents when necessary, and help maintain the organization's overall security posture. The position requires strong analytical skills, attention to detail, and the ability to follow established processes to ensure effective security monitoring and response.
Key Responsibilities:- Monitor SIEM and other applications for security incidents
- 2nd level analysis and response to security incident and other security related requests
- Log and document event responses per security operations procedures
- Perform basic application administration for security related monitoring and operations applications
- Monitor Security application health
- Create and/or update security operations procedure/process documentation
- Create and/or update security technical and architectural documentation
- Stay abreast of current threats and vulnerabilities, particularly those that may directly impact the customer
- Provide tuning and filtering recommendations to engineering teams.
- Employee may be asked to complete related duties other than those indicated above as assigned by their supervisor
Qualifications:- Minimum 3 years of experience in cyber security
- Experience with SEIM tools
- Experience in the following:
- Security Vulnerability tools and processes
- Network Security controls such as IDS/IPS, Firewalls, etc.
- TCP/IP and networking/system vulnerabilities
- Experience/knowledge/expertise with security incident processes
- Experience/knowledge/expertise with trouble isolation, log analysis, event correlation, and data analysis
- Strong analytical and problem-solving skills
- Be a self-starter, self-motivated, and self-directed
- Ability to work independently and in a team environment
- Proven to be detail oriented and be able to use many various resources
- Must be able to multi-task and work on numerous projects with different tools
- Desired certifications: Security+, GSEC, GCIA or similar
- Bachelor's Degree in Computer Science or related field
