Security Analyst I(NW Arkansas)

Responsibilities

• Perform assessment and advanced analysis across endpoint, server, and network infrastructure
• Threat hunting on customer networks to detect and isolate threats while providing recommendations
• Conduct proactive security investigations and searches within client environments to detect malicious activity
• Coordinate incident investigations and perform deep-dive analysis on detected threats
• Identify indicators of attack and compromise through alerts, threat hunting, and investigation notes
• Apply the MITRE ATT&CK framework to map customer use cases to tactics and techniques
• Use Google SecOps SOAR to automate investigation and response workflows
• Participate in an after-hours on-call rotation as an Incident Controller
• Scope customer security incidents and determine impact
• Document findings and communicate recommendations and security guidance based on analysis
• Analyze raw log data through SIEM platforms to support escalations and investigations
• Collaborate with our teams and customers using Google Workspace (Gmail, Google Chat, Google Meet) and Slack

Requirements

• Hybrid Position in our NW Arkansas Office
• 1 or more years of progressive IT security experience
• Experience administering Windows, Linux/Unix, or macOS systems
• Advanced understanding of networking concepts and network artifacts
• Experience using Endpoint Detection and Response (EDR) solutions such as Cortex XDR, SentinelOne, CrowdStrike, or Microsoft Defender
• Knowledge of at least one leading SIEM platform, such as Google SecOps, Microsoft Sentinel, Splunk, Elastic, IBM QRadar, or Chronicle
• Experience with SOAR platforms, Google SecOps SOAR
• Familiarity with cloud security posture management (CSPM) platforms such as Wiz
• Familiarity with Google Workspace (Gmail, Google Chat, and Google Meet) and Slack in a professional environment
• Proficiency using scripting or programming experience in Python, JavaScript, PowerShell, Bash, or a similar language