Security Analyst

About the job

Your Role And Key Responsibilities

The security delivery support clients in managing their Security Operations and protecting their environments to mitigate security risks (e.g., insider and external threats, intentional and accidental). Position is for an experienced security professional with demonstrated experience within Security Operations, Threat Detection & Response, Security Intelligence, CSM (Continuous Security Monitoring) and NSM (Network Security Monitoring) within the SOC operations environment

Required Technical And Professional Expertise

Bachelors degree in Computer Science, Cybersecurity, Information Technology, or other related fields, from an accredited university. Equivalent professional experience can be used in lieu of a degree

0-2 years of security analyst experience, preferably in a managed services environment.

Basic experience with operation of commonly used information security solutions (with focus on Splunk, QRadar, Crowdstrike, Sentinel, TrendMicro)

Base technology knowledge of Windows, Active Directory, Linux, SIEM Solutions, Antivirus software, Proxy

Strong knowledge of current security threats, techniques, and landscape, and a dedicated and self-driven desire to research and learn more about the information security landscape.

Review and triage experience with endpoint detection and response tools

Experience and knowledge related to the configuration and maintenance of security monitoring and reporting platforms.

Strong analytical skills, decision making, being able to work under time pressure, cooperating with other people and using the escalation processes when necessary.

Experience in technical Team coordination/management would be a plus.

English: Fluent

Strong critical thinking and analytical skills and ability to think out of the box required.

Must be able to work independently or with a team, under minimum supervision.

Preferred Technical And Professional Experience

MBA or masters degree

A minimum of 5 years hands on experience with one or more of the following areas:

QRadar or Splunk and Microsoft Sentinel.

Thorough knowledge of SOAR (Security Orchestration Automation & Response) technologies.

Thorough knowledge on defining data sources monitoring based on clients business

Thorough knowledge on MITRE Frameworks (ATT&CK, D3FEND)

Familiar with Cyber Kill Chain

Thorough knowledge on how to operationalize ongoing security configuration governance service using SOC standard methodologies, metrics, KPIs, KRIs, Operational Procedures.

Required Education

Bachelor's Degree