Analyst, Cybersecurity DFIR

Job Description

Email Triage - Evaluating staff reported emails for malicious intent Data Loss Prevention - Reviewing Daily DLP events for evidence of internal information leaving the network Operations - Handling end user support requests Some examples of end-user requests: unblocking websites, permitting file uploads, modifying anti-virus policies, and testing email attachments Incident Management - Detect, document, investigate, and resolve security incidents in an efficient manner Intrusion Detection - Develop and tune anomaly detection capability to produce reliable actionable data Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity Desirable Knowledge and Experience University degree in Engineering, CIS, or related discipline Hands-on experience with Systems Administration Deep understanding of networking and its application Relevant Information Security experience Advancement Opportunity Seniority is determined by experience and demonstration of exceptional competencies including: Automation - Automating simple tasks using python increasing efficiency and continuity Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls Serve as a responsible Subject Matter Expert (SME) on one or more tools or technologies via learning, testing, implementing, enhancing, and educating