Information Security Analyst

About the role

The Threat Management organization at Omnissa is seeking an Information Security Analyst to contribute to building a robust and resilient information security posture. This role involves monitoring, analyzing, and responding to security events, developing new threat detections, and improving security processes.

Responsibilities

• Monitor, analyze, and respond to security event data from various sources, including host logs, network traffic, and threat intelligence feeds.
• Respond to critical security alerts and perform incident response activities from initial detection through containment, eradication, recovery, and post-incident activities.
• Contribute to the ongoing development and maturity of detections and processes by developing new Threat Detections, Playbooks, and SOPs for responding to emerging threats and trends.
• Continuously evaluate and improve the effectiveness of security processes, alerting, and tools by identifying opportunities for tuning, automation, and streamlining workflows to enhance efficiency and reduce risk.

Requirements

• A minimum of 2 years of work experience in the Security Monitoring and Incident Response space.
• Experience with SIEM systems, including configuration, tuning, optimization, and threat detection creation.
• Understanding of cloud security principles, including Azure security best practices and Microsoft Defender for Azure.
• Familiarity with endpoint detection and response tools, such as Crowdstrike Falcon.
• Experience with DLP solutions, including Trellix DLP, to identify and prevent sensitive data exfiltration.
• Knowledge of IAM principles and Microsoft Identity solutions to ensure secure authentication and authorization.
• Experience with SOAR tools to streamline security workflows and automate tasks. (Tines experience is preferred)
• Proficiency in scripting languages, such as Python or PowerShell, to automate security tasks and develop custom tools.
• Ability to analyze complex data sets and identify potential security threats.
• Experience using and leveraging AI capabilities to improve investigation and response workflows.
• Excellent verbal and written communication skills to collaborate with stakeholders and provide insightful analysis.
• Commitment to ongoing learning and professional development in the field of cybersecurity.
• Knowledge of relevant compliance frameworks, such as HIPAA, SOC2, ISO, or PCI-DSS, to ensure security controls are aligned with regulatory requirements.
• Capacity to work effectively in a dynamic environment with multiple priorities and deadlines.

Qualifications

• Bachelor’s degree preferred, or equivalent combination of education and relevant professional experience.

Skills

• Experience with SIEM systems.
• Understanding of cloud security principles.
• Familiarity with endpoint detection and response tools.
• Experience with DLP solutions.
• Knowledge of IAM principles and Microsoft Identity solutions.
• Experience with SOAR tools.
• Proficiency in scripting languages.
• Ability to analyze complex data sets.
• Experience using and leveraging AI capabilities.

Benefits

• Competitive compensation, typically between $85,200.00 - $115,000 per year, with the possibility of a corporate bonus program.
• Employee ownership.
• Health insurance.
• 401k with matching contributions.
• Disability insurance.
• Paid-time off.
• Growth opportunities.

Pay

The typical base salary for this role is between $85,200.00 - $115,000 per year.

Schedule

This role is offered on a hybrid schedule.

Location

Atlanta, GA