Minimum of 2 years in cybersecurity operations or incident response
Experience with EDR, MDR, XDR, or security monitoring
Strong oral and written communication skills
Hands-on experience with security tools like CrowdStrike and SIEM
Familiarity with cloud security products and services
Industry certifications such as GCIH, Security+, or CISSP preferred
Responsibilities
Operate and tune security monitoring tools including EDR and SIEM
Identify and analyze anomalous activity in customer environments
Triage event data to find potential indicators of compromise
Escalate malicious activity to incident responders
Participate in incident investigation and recovery activities
Develop and maintain customer relationships for MDR service delivery
Create and deliver reports on identified activities to stakeholders
Benefits
Opportunity for professional development and training
Exposure to a variety of security tools and technologies
Work in a dynamic and collaborative environment
Nationwide remote work flexibility
Engagement with diverse customer technology environments
Full Job Description
Security Analysts provide first-line security monitoring services to At-Bay's Managed Detection & Response customers with specific responsibilities including:
Operation and tuning of security monitoring tools including Endpoint Detection & Response (EDR), network monitoring, email security, Data Loss Prevention (DLP), Security Information and Event Management (SIEM), security automation tools, and others as needed
Identification and analysis of anomalous activity in customer technology environments
Triage of event data to identity potential indicators of compromise
Escalation of potentially malicious activity to engage incident responders where necessary
Participation in incident investigation, containment, remediation, and recovery activities where necessary
Developing and maintaining customer relationships to facilitate delivery of MDR services
Developing and delivering reports on identified activity to customer stakeholders as needed
Key skills:
Previous EDR, MDR, XDR, security monitoring, or incident response experience
Strong oral and written communications skills
Previous hands-on experience performing security operations including several of the following:
Security monitoring using a variety of endpoint and network tools
Deployment, tuning, and operation of security tools from vendors such as CrowdStrike, SentinelOne, and others
Deployment, tuning, and operation of SIEM or other tools used to aggregate and analyze security-relevant data
Triage and analysis of potential indicators of compromise
Performing rapid response to contain and/or remediate potentially malicious activity
Development and analysis of cyber threat intelligence
Participation in investigations involving digital evidence
Intrusion detection / cyber threat hunting
Malware analysis
Previous hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)
Minimum requirements:
Bachelor's degree or equivalent
Minimum of 2 years of experience in cybersecurity operations, incident response, or another security discipline
Willingness to travel as needed to perform job functions
Preferred requirements:
Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurity
Preferred candidates will have a mix of cybersecurity experience including either security operations or security engineering / architecture
Knowledge of cloud environments including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)
One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)
Work location:
USA, nationwide
#LI-CK1
About At-Bay
At-Bay is a San Francisco-based insurance company that specializes in cyber insurance. The company was founded in 2016 by Rotem Iram and Roman Itskovich, both of whom have backgrounds in cybersecurity. At-Bay offers a range of insurance products to protect businesses against cyber threats, including data breaches, ransomware attacks, and other forms of cybercrime. The company uses a combination of data analytics and risk assessment to provide customized insurance policies to its clients. At-Bay has partnerships with a number of leading cybersecurity companies, including CrowdStrike and SentinelOne.
