IT Security Analyst (Tier 3)
Full Time
Technical
San Antonio, TX, US
Tampa, FL, US
30+ days ago
Requisition ID: 1112

APPLY
POSITION SUMMARY:

Working within our Security Operations Center (SOC), the IT Security Analyst (Tier 3) is responsible for reviewing system log events and data packets to determine whether activity is normal or malicious. The Security Analyst will ensure that aspects of the customers’ environments are identified and understood to enable accurate actionable reporting for other tiers. Analysts will also participate in developing processes, procedures, training, etc. for new technologies. Strong knowledge of incident response principles and phases.


DUTIES AND RESPONSIBILITIES:

Performing systems and network analysis of intrusions to customers’ network infrastructure, applications, operating systems, firewalls, proxy devices, malware detection and more and work as part of the team conducting preliminary incident response, event analysis and threat intelligence.
Conduct initial and ongoing tuning of customers’ environments from on-boarding to day 2.
Participate in solutions development for new products as they are introduced to the organization.
Handling escalations from Security Specialists and Associate Analysts.
Reviewing security events that are detrimental to the overall security posture; analyze and detect sophisticated and nuanced attacks, discern false positives.
Providing both strategic analysis and near real-time auditing, investigating, reporting, and remediation, coordinating and tracking of security-related activities for customers.
Performing correlation of events from network, enterprise and host sensors.
Assisting in compliance efforts, processing security-related services, change controls, security research.
Conducting vulnerability testing.
Expanding organizational knowledge by contributing to Knowledge Base.
Mentoring junior tiers in the organization on security concepts and ideas.
Able to perform other duties as assigned.
EDUCATION AND WORK EXPERIENCE:

Bachelor's Degree in Information Technology, Cyber Security or related field.
5+ years’ experience in an information technology role.
5+ years Cyber Security related experience.
Preferably MSSP work environment/experience OR SOC experience.
Knowledge of web application security and in vulnerability management required.
SIEM experience (working knowledge of use cases, reporting and trending, rules creation) such as Cyguard, FortiSIEM, Arcsight, QRadar.
IPS/IDS: Writing signatures or investigating events.
Experience with packet analysis tools, such as Wireshark.
Perform basic hunt activity for enterprise network.
OS knowledge for various versions of UNIX, LINUX, and Windows.
Experience across web and desktop applications, cloud computing.
Strong understanding of network protocols TCP/IP, 802.11, layer 2 and 3 switching, DHCP, DNS, network security, cloud computing and troubleshooting skills.
Excellent analytical and problem-solving skills with ability to evaluate information from multiple sources and provide recommendations to enterprise organizations.
Hands-on experience with security products including intrusion detection systems (Snort/SourceFire), endpoint solutions (McAfee, Cisco AMP) and firewalls (CheckPoint, Cisco PIX, PALO).
Operating systems knowledge and systems administration skills for various versions of UNIX, LINUX, and Windows and ability to read and understand Windows logs.
One or more of the following certifications is desired (not required): CISSP, GCIA, GCIH, CySA, CASP.
Basic understanding of scripting languages (doesn’t need to be able to script but able read/analyze scripting languages).
Must be self-directed, able to manage individual projects or act as part of a larger team.
Must be able to manage multiple customers environment at any given time.
KNOWLEDGE, SKILLS AND CHARACTERISTICS REQUIRED:

A keen interest in security and the need for the Confidentiality, Integrity and Availability of information and information systems to be maintained.
Excellent Analytical skills.
Excellent communications, presentation, and listening skills.
Excellent organizational and time-management skills and the ability to multi-task and prioritize.
High level of integrity, judgment, and situational awareness.
Ability to work both independently and collaboratively with peers, across teams, and with management.
Flexibility and adaptability to change.
Excellent customer service skills.