Overview

As a Security Analyst, you will perform day-to-day security monitoring and response activities ranging across incident response, threat intelligence/analysis, forensic analysis and support the operation and administration of detection technologies.

Your Impact

The essential functions of this position include:

• Perform front line monitoring, security event response, triage, remediation and recovery activities for security events affecting ePlus' information assets
• Perform proactive and reactive incident response lifecycle activities, including detection, triage, analysis, containment, eradication, recovery and reporting
• Leverage a variety of information sources and indicators, including SIEM technologies, system log and network flow data, manual reports and observations, to differentiate between non-consequential events and those that require further investigation and or incident response activities
• Functions as incident handler to rapidly contain and correct identified issues and events, escalating as necessary and minimizing the potential for events to evolve to the level of a significant incident
• Assist with the selection, deployment, operation, administration, and maintenance of security event detection and related technologies
• Provide routine reporting on security event and incident handling activities
• Contribute to the evolution and continuous improvement of technical solutions, process/procedures, and documentation for incident response, threat intelligence, advanced persistent threat detection and vulnerability analysis
• Support and administer other areas of security, incorporating knowledge and insight gained to help evolve and adapt the security monitoring and incident response function

Qualifications

• Bachelor's degree in Computer Science, Information Technology or Business Management or equivalent work experience
• 3+ years of Information Technology experience
• 2+ years of relevant Information Security experience
• Experience performing vulnerability testing/management preferred
• SANS GCIH, GCIA, ISC2, and other security certifications preferred
• Relevant security knowledge and experience in two or more of the following: incident response/handling, malware analysis/response, network/host intrusion detection, vulnerability analysis/management, security operations
• Experience handling intake/response to potential information security events of interest
• Working knowledge of enterprise security detection technologies (e.g., IDS/IPS, packet capture/protocol analysis)
• Working knowledge of network protocols and operating systems (e.g., TCP/IP, Windows, Linux)
• Comfortable in high-pressure, time-sensitive situations; able to provide accurate information to guide decisions in crisis moments
• Able to adjust and present information to a variety of audiences - including technical, management, and business stakeholders
• Experience working in a Security Operations Center (SOC), Managed Services, or similar environment is preferred

Position Specifics

The initial base salary range for this position is expected to be between $70,000 and $100,000 annually. The final base salary offered will be determined by multiple factors, including, but not limited to, job-related knowledge, depth of experience, skills, certifications, and geographic location.

ePlus offers a full range of medical, financial, and/or other benefits (including 401(k) eligibility, employee stock purchase program, and various paid time off benefits such as vacation, sick time, and personal leave), dependent on the position offered. Details of participation in these benefit plans will be provided if an offer of employment is extended.

If hired, employee will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Physical Requirements

• While performing this role, you will engage in both seated and occasional standing or walking activities. We provide reasonable accommodations, in accordance with relevant laws, to support success in this position.
• By embracing our values, you will contribute to our collective mission of making a positive impact within our organization and the broader community. We understand that this job description serves as a guide and is not an employment contract.

ePlus maintains a California Consumer Privacy Act (CCPA) Privacy Notice on our Trust Center, available here: CCPA Privacy Notice.

Notice to Recruiting Agencies: ePlus only accepts unsolicited resumes when presented directly by a candidate. Unsolicited resumes submitted to ePlus from any other source will be considered ePlus property and will not qualify for any placement or referral fees. ePlus will only pay such fees in connection with a valid written agreement between ePlus and the referring agency, and then only after providing advance written approval to the referring agency to submit resumes in connection with a particular opportunity.