Cybersecurity Analyst

About the Role

Under general supervision, this role involves detecting and mitigating cybersecurity threats in the organization. The Cybersecurity Analyst will be responsible for analyzing a variety of log sources such as network, endpoint, server, cloud, identity and web events to identify cyber threats, perform threat response activities to neutralize threats, and create or improve threat detections to improve overall security operations.

Primary Responsibilities

• Security Monitoring: Review security logs for threats, anomalies, intrusions, and abnormal connection behavior.
• Incident Investigation: Investigate, report, and escalate issues to cybersecurity staff and management as required.
• Incident Response: Participate in incident response, computer forensics, data preservation, and investigations related to network breaches or unauthorized data access.
• Process improvements: Recommend enhancements for an efficient threat-hunting function.
• Reporting and Analysis: Support regular and special reporting, including reports of vulnerabilities, risks, control deficiencies, remediation strategies, and performance metrics.
• Threat Intelligence Gathering: Collect, analyze, and disseminate threat intelligence from various sources to identify potential threats and vulnerabilities.
• Threat Hunting: Proactively search for indicators of compromise (IOCs) and advanced persistent threats (APTs) within the network.
• Malware Analysis: Perform static and dynamic analysis of malware samples to understand their behavior and develop mitigation strategies.
• Threat Detection Modeling: Develop and maintain threat models to understand potential attack scenarios and improve defensive strategies.
• Threat Awareness: Provide threat awareness to other teams on the latest threats, attack techniques, and mitigation strategies.
• Collaboration: Work closely with other cybersecurity teams.

Qualifications

Preferred qualifications include a bachelor's degree in a cybersecurity-related field and 3 to 5 years' experience in cybersecurity operation center (CSOC) functions such as detection & analysis, threat hunting and threat intelligence.

Knowledge, Skills, and Abilities

Knowledge of:

• Core Cybersecurity Operation Functions
• Threat actor attack chains and campaigns
• Cybersecurity standard frameworks, controls, technologies, and solutions
• Incident Response Management
• IT Domains such as network, endpoint, server, cloud, identity and web

Skill to:

• Use SIEM, EDR, and SOAR platforms
• Build effective threat detection rules and queries
• Develop and enhance cybersecurity playbooks
• Develop and perform cybersecurity analysis and threat hunts
• Consume and disseminate cybersecurity threat intelligence
• Perform strong communication, both oral and written

Ability to:

• Work within a team and with other teams
• Understand scripting languages (e.g. Python, Powershell, Bash)
• Emulate threats against enterprise infrastructure

Benefits

• Multiple health plan options, including a $0 employee premium option
• 6% fully matched retirement plan (includes long term disability and family survivor benefits)
• $25,000 paid life insurance
• Generous leave policies
• Stable industry sector
• Flexible work schedule, providing the ability to maintain a great work/life balance
• Eleven paid holidays
• Dental, vision, and other insurance options

Pay

$74,896.56 - $93,605.04 Annual Salary, depending on qualifications

Schedule

Full-Time 40 Hour Weekly position