DESCRIPTION OF ESSENTIAL DUTIES:- Adhere to and evaluate current security procedures and standards, suggesting improvements as needed.
- Monitor and respond to security alerts as outlined by company policies and procedures.
- Follow policies and procedures to ensure cyber risk is properly managed in accordance with the risk tolerance of the company.
- Guide, support, and educate other members of the team as they work towards the common goal of safeguarding company assets.
- Assist the company with risk analysis and risk mitigation efforts.
- Maintain a deep understanding of Information Technology and security architecture.
- Use security knowledge and tools to monitor for imminent and pervasive threats to company assets.
- Automate playbooks as needed to improve response time and efficiency.
- Provide status and metric reporting and adhering to internal operational security and policies; Documents all actions taken in ticketing system.
- Complete task and project work as assigned.
OTHER RESPONSIBILITIES/REQUIREMENTSDevelop and maintain a positive relationship with equipment vendors and company personnel.
- Provide management and team members detailed information concerning current technical issues
- Continually improve the service by identifying and correcting issues or gaps in knowledge capital (analysis procedures, playbooks, network models), identifying and recommending new or updated tools, content, countermeasures, scripts, plug-ins and other "glue"
- Perform peer reviews and consultations with other Cyber Security Analysts regarding potential security incidents
- Superb communications/interpersonal skills with the ability to interact with others
- Serve as a Subject Matter Expert in at least one security-related area (e.g. reverse engineering malware, penetration testing, software testing, cryptography, etc.)
- Be available for 24/7 on-call rotation
- Ability to follow sound business ethics when executing job responsibilities
- Must have an understanding of the importance of learning and that it is never-ending.
- Must be a self-motivated individual, willing to constantly evaluate the environment for improvement.
QUALIFICATION, EDUCATION AND EXPERIENCE REQUIREMENTS:- Bachelor of Science in Computer Science or Information Management combined with five years security or technology support experience required; Master's degree may substitute for some work experience
- Documented experience with the following technologies: leading SIEM technologies, IDS/IPS, network- and host-based firewalls, data leakage protection (DLP)
- Working experience with possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.
- Working experience with Windows and Unix administration
- Working experience with common penetration testing techniques
- Working experience with basic networking protocols such as IP, DNS, HTTP, etc.
- Working experience with system security architecture and security solutions
Preferred:- Certification include Security+, Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH)
- Excellent interpersonal, organizational, oral and writing skills
- Strong analytical and problem-solving skills
- Self-motivated to improve knowledge and skills
- A strong desire to understand "the what" as well as "the why" and "the how" of security incidents
SUPERVISORY RESPONSIBILITIES: PHYSICAL DEMANDS/WORK ENVIRONMENT: - Experience in a fast-paced support environment as a member of a 24x7x365 network and/or security operations team; Must be able to concentrate for long periods of time
- Must be able to lift and carry 25 pounds on occasional basis
