Security Analyst

Top Skills & Years of Experience

• Understanding of NIST Cybersecurity Framework, NIST RMF, and other common security standards.
• Experience and working knowledge of common security frameworks and control theories to include current applicable NIST, CJIS, and ISO standards.
• Experience with creating and leading discussions around the implementation and artifact collection of NIST 800-53 controls.
• Proficiency in triaging and analyzing cybersecurity alerts using enterprise technologies and tools.
• Familiarity with phishing mitigation strategies and email threat analysis.
• Incident Response Forensics and Remediation (i.e. Crowdstrike, Sandbox evaluation & detonation, Phish evaluation, Malicious Website and Malicious Intent Identification).
• Customer service as it pertains to security incident management and communication with end user about dangerous behavior.
• Excellent technical writing and documentation skills, including incident reports and playbook development.
• Ability to work independently and as part of a distributed team to achieve shared objectives.

Nice to have skills

• Capability to tune and optimize SIEM rules and detection logic to reduce noise and improve fidelity.
• Strong interpersonal communication skills with the ability to explain complex topics to non-technical audiences.
• Experience working as a team member on projects to improve business needs.
• Experience supporting endpoint, network, and cloud-based security controls in large-scale environments.
• Demonstrated ability to adapt to emerging threats, technologies, and evolving operational needs.