Security Operations Analyst

Security Operations Analyst

Bachelor's degree in Cyber Security or related field, or equivalent work experience 4-years of experience in Security Operation Centers or a similar role with at least 2-years managing all aspects of a Security Operation Center Formal IT Security/Network Certification such as CompTIA Security+, Network+, ISC2 CC, ISSAP, CCSP, SANS GIAC Certified Intrusion Analyst (GCIA) or SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Continuous Monitoring (GMON) or related Degree Candidate must have familiarity with Cyber Kill Chain, MITRE ATT&CK, and NIST Cybersecurity Frameworks Knowledge of common indicators of compromise and of methods for detecting these incidents Knowledge of IT core infrastructure and cybersecurity components/devices Have demonstrated expertise in developing, implementing, tuning, and automating operations center programs Experience with scripting preferably with Python/PowerShell Experience operating and tuning EDR/XDR platforms Experience monitoring threats via a SIEM console with significant experience performing analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, or intrusion prevention logs Knowledge of diverse operating systems, networking protocols, and systems administration, and system forensic investigation techniques Be adept at managing crises; provide front-line coordination in responses to a myriad of crises