Information Security, Sr Analyst SecOps

Summary

The Information Security, Sr Analyst SecOps is responsible for maintaining confidentiality, integrity, and availability for all cyber security systems. This person will operate and maintain security software including but not limited to email security, endpoint detection and response (EDR), vulnerability management, security incident and event management (SIEM) and network detection and response (NDR). Analysts will maintain a daily checklist and create security incidents as appropriate for any findings. Analysts will also support the governance, risk, and compliance functions by monitoring security stack agents’ saturation. Finally, all actions performed by analysts will be recorded into the security incident software to ensure service level agreements are being met.

The Sr Analyst SecOps will need to demonstrate technical knowledge across different security principles and techniques, like: DLP, Vulnerability Management, EDR, Email Security, SIEM, Network Security, Encryption, and cybersecurity best practices. Ideally, this person will have strong knowledge and experience with security products like: Splunk, CrowdStrike, ZScaler, Qualys, Fidelis, Abnormal, Active Directory (AD) and Azure AD. They will also need to develop business knowledge during their tenure so that security strategies are met while providing the best user experience possible.

Essential Duties and Responsibilities include the following. Other duties may be assigned.

• Work with other IT Teams for vulnerability remediation and validation.
• Execute risk/threat-hunting activities.
• Perform security incident response activities.
• Evaluate, setup and configure security products.
• Administrate security products as part of day-to-day operations.
• Resolve security products issues that impact business operations.
• Review audit, security, and system logs and correlation with SIEM.
• Work on blue, purple, and red team exercises.
• Participate in change control meetings for evaluation of risk.
• Develop, document, and improve processes for security operations.
• Evaluate and identify security risks and report findings to management.
• Evaluate IOCs and TTPs from classified sources and extrapolate them for consumption into cyber defense tools.
• Contribute to assisting, training, and supporting other team members.
• Ensure all information security systems are operational and within SLAs.
• Track all security incidents and ensure items are being resolved within SLAs.
• Create reports and develop metrics and KPIs for cyber security tools.
• Stay up to date on trends and new tools in the security industry.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily with or without reasonable accommodations. The requirements listed below are representative of the knowledge, skill and/or ability required.

Education and/or Experience

Bachelor’s degree in information security, Information technology, Computer Science or other related technology degree. Industry certifications like (ISC)²CISSP, ISACA CISM, CompTIA Security+, CompTIA Network can also satisfy the education requirement. Experience with cyber security products (CrowdStrike, SentinelOne, ZScaler, Netskope, Splunk, Abnormal, Proofpoint, Fidelis, ExtraHop).