Information Security Analyst

Responsibilities

• Act as the primary liaison for forensics analysis tasks such as analysis of digital media devices to identify, reverse engineer and de-obfuscate content related to a security incident.
• Upkeep and maintain the Digital Forensics Program for the SOC, including routine process enhancements and upskilling the team on drafted technical reports.
• Support SOC with general SOC Operational Duties such as security incidents for networks and systems.
• Augment cyber threat intelligence development and reporting generated from forensics investigations.
• Support routine identification, development and implementation of automation tasks surrounding the SOC Forensics Program.
• Research, evaluate, and recommend new security tools, techniques, and technologies and introduces them to the enterprise in alignment with IT security strategy.
• Utilizes COTS/GOTS and custom tools and processes/procedures to scan, identify, contain, mitigate and remediate vulnerabilities, and intrusions.
• Performs analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Occasionally provide briefings to senior staff on forensics investigation results.

Requirements

• Bachelor's degree in related field and 2 years experience is preferred. Experience can be substituted in lieu of education.
• Required Skills (must have): Host, Cloud, Identity, and Network Forensics; Digital Forensics tools; SOC experience / following SOC SOPs; SIEM (Sentinel preferred); Incident Response; Malware Analysis; Packet Capture / Memory Analysis; Chain of Custody / Evidence Collection; Python, C++, or JavaScript; IDS/IPS, Firewalls, Anti-Malware; Technical Report Writing.

Preferred Skills / Nice to Have

• SIEM (Sentinel preferred)
• Incident Response
• Malware Analysis
• Packet Capture / Memory Analysis
• Chain of Custody / Evidence Collection
• Python, C++, or JavaScript
• IDS/IPS, Firewalls, Anti-Malware
• Technical Report Writing

Benefits

Shift Rotation is to be expected based on operational needs, remaining on the same shift is not guaranteed. Reasonable notice time will be provided prior to any shift changes.

Pay

Details on pay are not specified in the posted information.

Schedule

Details on schedule are not specified in the posted information.

Qualifications

Reasonable notice time will be provided prior to any shift changes.

Skills

• Programming languages such as Python, C++, JavaScript
• Evidence Acquisition for Chain of Custody process
• Demonstrated Host, Cloud, Identity, Network forensics experience
• Demonstrated packet capture, volatile memory, suspicious script analysis and forensics experience
• Physical Device Imaging software familiarty
• Digital Forensics Software familiarity
• IDS/IPS, Firewalls, and Anti-Virus/Anti-Malware technologies
• Incident Response

Important Note

Reasonable notice time will be provided prior to any shift changes.

Prescreening Questions

• Are you currently pursuing any digital forensics education or certifications? Which ones and when are you expected to complete?
• Do you have experience with evidence Acquisition for Chain of Custody process?
• Do you have demonstrated Host, Cloud, Identity, Network forensics experience? Please list any experiences you have and which ones you are most comfortable/familiar with.
• Do you have demonstrated packet capture, volatile memory, suspicious script analysis and forensics experience? Please list the types you have, and which ones you are most comfortable/familiar with.
• Do you have Physical Device Imaging software familiarty? Please name examples.