Loading...
SeniorFull-timePythonAPIAI
About the Role
We are seeking an experienced and technically proficient Security Analyst to join our shared services team. This role involves managing security incidents through monitoring, investigation, and root cause analysis while recommending mitigation strategies. The position offers the opportunity to work with cutting-edge security tools in a highly analytical environment.
Key Responsibilities
- →Continuously monitor and analyze security events, network traffic, and alerts from SIEM and other tools in a 24x7 environment
- →Perform initial investigation and analysis to determine if alerts are true positive incidents or false positives
- →Execute documented procedures for immediate containment actions such as network traffic isolation or account disabling
- →Conduct analysis of security logs, network packet captures, and endpoint data to establish initial scope and indicators of compromise
- →Assist in performing scheduled vulnerability scans, compiling results, and supporting remediation tracking
- →Create clear, detailed incident reports with timelines, findings, and recommended next steps
- →Ensure all incident detection and classification services adhere to established procedures and SLAs
- →Research emerging threats and assist in updating internal detection and hunting capabilities
- →Identify opportunities for automation of routine tasks and improvements in SOC workflow efficiency
- →Effectively communicate security issues and findings to customers and internal teams
- →Work within a 24x7x365 Security Operations Center on a rotating shift schedule
Requirements
- ✓2-4 years of experience in SOC, MSS, related internship, or relevant education
- ✓Foundational knowledge of core networking principles (TCP/IP, DNS, HTTP) and system architecture (Windows/Linux)
- ✓Exposure to or experience with security monitoring platforms, preferably SIEM solutions
- ✓Solid understanding of the cyber security threat landscape including common attack types and vectors
- ✓Demonstrated analytical, problem-solving, and critical thinking skills with ability to process large data amounts
- ✓Strong verbal and written communication skills for documentation and professional interaction
- ✓Relevant industry certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200 (preferred)
- ✓Experience with scripting languages like Python or PowerShell for task automation (preferred)
- ✓Academic background in Computer Science, Cyber Security, or related field (preferred)
- ✓Familiarity with various security management tools like vulnerability scanners, EDR, and firewalls (preferred)
- ✓Proven ability to work effectively under pressure and rapidly changing priorities (preferred)
