Security Analyst I

About the role

The Managed Services Security Analyst is responsible for security solutions for clients. The Security Analyst I will demonstrate the capacity to exceed client expectations representing and promoting the Cyderes brand through positive interaction with other teams within the company.

Responsibilities

• Perform assessment and advanced analysis across endpoint, server, and network infrastructure.
• Perform threat hunting on customer networks to detect and isolate threats while providing recommendations.
• Conduct proactive security investigations and searches within client environments to detect malicious activity.
• Coordinate incident investigations and perform deep-dive analysis on detected threats.
• Identify indicators of attack and compromise through alerts, threat hunting, and investigation notes.
• Apply the MITRE ATT&CK framework to map customer use cases to tactics and techniques.
• Use Google SecOps SOAR to automate investigation and response workflows.
• Scope customer security incidents and determine impact.
• Document findings and communicate recommendations and security guidance based on analysis.
• Analyze raw log data through SIEM platforms to support escalations and investigations.
• Collaborate with our teams and customers using Google Workspace (Gmail, Google Chat, Google Meet) and Slack in a professional environment.
• Participate in an after-hours on-call rotation as an Incident Controller.

Requirements

• Hybrid Position in our NW Arkansas Office
• 1 or more years of progressive IT security experience.
• Experience administering Windows, Linux/Unix, or macOS systems.
• Demonstrate an advanced understanding of networking concepts and the network artifacts.
• Experience using Endpoint Detection and Response (EDR) solutions such as Cortex XDR, SentinelOne, CrowdStrike, or Microsoft Defender.
• Knowledge of at least one leading SIEM platform, such as Google SecOps, Microsoft Sentinel, Splunk, Elastic, IBM QRadar, or Chronicle.
• Familiarity with cloud security posture management (CSPM) platforms such as Wiz.
• Familiarity with Google Workspace (Gmail, Google Chat, and Google Meet) and Slack in a professional environment.
• Hold at least one industry certification (Security+, CEH, OSCP, or a SANS certification such as GCIH, GCIA, GSEC, or GMON), or actively work toward one.
• Demonstrate basic scripting or programming experience in Python, JavaScript, PowerShell, Bash, or a similar language.

Why Cyderes?

• Benefits that go beyond the basics, we support our people so they can do their best work.