Senior Security Analyst

Senior Security Analyst will work as a member of the CDC team. The successful candidate will possess deep technical knowledge on a number of security technologies; have a solid understanding of security investigations and Incident Response. Senior Analyst will assist with developing and documenting work processes and train other members of the team.

Primary Duties and Responsibilities

• Assist in monitoring security alerts and events using security information and event management (SIEM) tools, intrusion detection systems, and other monitoring platforms.

• Identification of risk scenarios and translation into Use Cases / Active Threat Hunting.

• Triage of security events (end-to-end).

• Collaborate with cross-functional teams, including IT, to ensure security measures are integrated into the organizations technology infrastructure.

• Development of playbooks.

• Support the local security management and service owners in case of IT security incidents (incident response).

• Optimization of use cases and rules for the identification of potential attacks.

• Create rules for compliance and audit requirements and create and manage Watch Lists for current threats.

• Create custom rules/rule modifications and custom reports/ report modifications as needed.

• Create custom documentation for internal and external needs.

• Responsible for mentoring and training of other team members.

• Assist with designing and documenting work processes within the CDC.

• Perform other duties as assigned.

  Education/Experience/Skill

• Bachelors Degree or equivalent in Information Technology, Information Security/Assurance, Engineering or related field of study; at least 8+ years of related experience and/or training; or equivalent combination of education and experience required.

• Minimum 6-8 years Managed Security Services or Information Security experience required.

• Minimum 4 years of security investigation/Incident Response experience required.

• Proficiency in scripting languages e.g. Python , data query languages e.g. SQL , and familiarity with various security tools.

• Excellent written and verbal communication skills required.

• Solid understanding of Information and cyber Security, Networking concepts required.

• Strong Analytical thinking.

• Capability to put threat intelligence information into company context.

• Expert knowledge in attack strategies (e.g. MITRE Attack Framework)

• Exposure to various tools will be a plus - Defender , Sentinel , Splunk , Qualys etc.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.