Senior Information Security Operations Center Analyst

Responsibilities

• Responsible for planning and implementing security measures to protect computer systems, networks, and data.
• Handle higher level security investigations and incidents.
• Monitor network traffic for security events and perform triage analysis to identify security incidents.
• Receive incidents and perform deep analysis; correlate with threat intelligence to identify the threat actor, nature of the attack and systems or data affected.
• Define and execute on strategy for containment, remediation, and recovery.
• Deliver cyber intelligence services and material to information technology and business leaders.
• Identify new threat tactics, techniques and procedures used by cyber threat actors.
• Publish actionable threat intelligence for business and technology management.
• Participate in threat hunting activities to proactively search for threats in the enterprise environment.
• Create and maintain use cases for recurring investigation/incident triggers in support of the 24/7 Cyber Threat Operations and Cyber Threat Management program.
• Act as coordinator in the event of escalated cyber threats/incidents for Tier 1 analysts.
• Assist in escalated computer security incidents and cyber investigations including computer forensics, network forensics, root cause analysis and malware analysis.

Requirements

• Bachelor's degree required in Information Assurance, Computer Science, Engineering, or related technical field.
• Three (3) years or more experience in information security administration, offensive tactics, monitoring, and IR.
• Three (3) years or more experience related security systems administration with endpoint, network, application, and host-based security solutions.
• Two (2) years or more Cloud computing (e. g., Amazon Web Services, Google Cloud Platform or Microsoft Azure) security configuration and management experience preferred.
• Knowledge of the incident handling procedures and intrusion analysis models.
• Foundational knowledge of processes, procedures and methods to research, analyze and disseminate threat intelligence information.
• Demonstrated advanced knowledge of cyber security operations with a focus area in two or more of the following: Security Operations Center (SOC) operations, Intrusion Detection/Intrusion Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM) use, threats (including Advanced Persistent Threat (APT), insider) vulnerabilities, and exploits; incident response, investigations and remediation.
• Broad knowledge of general IT with a focus area in two or more of the following areas: operating systems, networking, computer programing, web development or database administration.
• Core Competencies

Demonstrates expertise in planning and implementing security measures, incident response, and threat intelligence analysis.

Proficient in managing security systems and conducting investigations to protect computer systems and networks.

• Highest-signal resume keywords
• Information Security Administration
• Incident Response
• Threat Intelligence Analysis
• Cloud Security Configuration
• Security Operations Center (SOC) Operations
• Hard Skills
• Cyber Security Operations
• Intrusion Detection/Intrusion Prevention Systems (IDS/IPS)
• Security Information and Event Management (SIEM)
• Computer Forensics
• Network Forensics
• Root Cause Analysis
• Malware Analysis
• Endpoint Security Solutions
• Network Security Solutions
• Application Security Solutions
• Industry Keywords
• Threat Actor
• Advanced Persistent Threat (APT)
• Incident Handling Procedures
• Threat Hunting
• Cyber Threat Operations
• Cyber Threat Management
• Tools & Technologies
• Amazon Web Services
• Google Cloud Platform
• Microsoft Azure
• #J-18808-Ljbffr