Cyber Security Operations Specialist

Cyber Fusion Center Incident ResponderCandidate will be working in the Cyber Fusion Center (CFC) at client.Candidate will be responsible for incident response activities to include network forensics, log analysis, and malware triage in support of incident response investigations, as well as report writing to support any investigations.With knowledge of the endpoint detect and response tools, the candidate will respond to triaged alerts on endpoint, network, server, cloud, and application technology.Incident response and handling are key skills, as well as a solid emotional quotient when dealing with users.Work daily responding to enterprise-wide alerts on client’s security controlsTriage and action malicious and suspicious detections in client’s environmentProvide metrics and reports as needed to demonstrate activity in the CFC IRPosition requirements:Experience working in a global, heterogenous security environmentExperience with Shell scripting and PowerShell preferred.Experience with PythonSecurity+ or equivalent security certification preferred.Experience with regular expressions, bash/zsh (cat|cut|sed|sort|uniq|sort) and other parser technologies required.Excellent communication skills, both written and verbal are required.