Senior Cybersecurity Analyst

About the role

The Security Operations Center provides 24/7/365 monitoring, analyzes, and responds to cybersecurity alerts for the organization. Provides rapid response to incoming security alerts, enriches those alerts with an initial triage effort and ensures the proper team is engaged for response. Monitors work queues for alerts of potential network threats, intrusions, and/or compromises. Assess validity and scope to determine if the alert is actionable and determine remediation steps required. Confirm accuracy of the alerting information. Identify malicious behaviors. Determine remediation actions needed. Escalate incident to proper team for response and remediation. Participate in and provide leadership to specialized guild related activities and projects. Mentor and provide guidance to associate and cybersecurity analysts.

Responsibilities

• Experience and knowledge conducting analysis of cybersecurity threats.
• Experience in cybersecurity event monitoring/analysis in a Security Operations Center environment.
• Efficient documentation of triage details, sources of information, and recommendations for response.
• Develop strong relationships with technical personnel from various disciplines to assist with projects, process improvements, and process documentation.
• Subject matter expert in specific processes, systems, and/or tools related to cybersecurity.
• Leverage enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement.

Required qualifications

• HS Diploma required.
• 4+ years of experience in Cybersecurity.
• Any one of the following certifications in cybersecurity required: Security+, CCNA Cyber Ops, CCSP, GCIA, GCIH, CEH, CySA+, OSCP, or equivalent.
• 4+ years of experience with any of the industry recognized analysis frameworks (Kill Chain, Diamond Model, MITRE ATT&CK, NIST Incident Response, etc.).
• 4+ years of experience with fundamental security and network concepts (Operating systems, intrusion/detection, TCP/IP, ports, etc.).
• 4+ years of experience with any one of the fundamental security concepts related to cloud platforms (AWS, Azure, GCP, etc.).
• 4+ years of experience demonstrating triage and investigative skills utilizing multiple security sensors including documentation and debriefing of incidents.
• Willing to work in a team-oriented 24/7 SOC environment; flexibility to work on a rotating schedule (including occasional shift work).

Preferred qualifications

• Bachelor's degree preferred.
• Experience working with SOAR Automation and developing SOAR playbooks.

Pay

The hourly pay for this role will range from $91,700 to $163,700 per year based on full-time employment. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc.

Benefits

In addition to your salary, we offer a comprehensive benefits package, incentive and recognition programs, equity stock purchase, and 401k contribution (all benefits are subject to eligibility requirements).