L3: Principal Security Analyst

Principal Security Analyst (L3)

Full-time, onsite preferred but remote candidates accepted. 

Principal Security Analyst (L3) are expected to handle customer-facing investigations, mentoring, and training of fellow analysts, and to participate in interaction with customers and other teams through email, phone, or video conference.

Primary Duties

• Lead and execute alert triage and determine if further investigation or action is required by the customer
• Assist customers with the investigation and response of incidents throughout the incident response process
• Perform investigations in response to customer requests and be able to provide further contextual information along with recommended actions
• Proactively threat hunt using network, log, and host data within customer environments
• Provide mentorship and guidance to junior level analyst

Required Qualifications

• Analyze packet captures/data and logs to perform incident response and identify potential compromises to customer networks
• Possesses a solid understanding of the TCP/IP protocol suite, security architecture, and common TTP’s (tactics, techniques, and procedures) used by threat actors
• Experience analyzing log data in a SIEM (Exabeam, Azure Sentinel, Splunk, Cortex XSIAM.)
• Strong understanding of incident response methodologies and reporting
• Strong understanding of Windows and Linux operating systems, security events, and common attacker tactics and methodologies
• Strong verbal/written communication and interpersonal skills are required to document and communicate findings, escalate critical incidents, and interact with customers

Preferred Qualifications

• 7+ years of SOC operations experience in enterprise environments
• 6+ years of experience performing forensic analysis of logs and packet captures to identify malicious artifacts
• Higher level security certifications (CEH, GCIH, GCFA, GCFE, GCTI, GCIA, GREM, GPEN, GFNA, OCSP)
• Expertise in security incident management, forensics, and vulnerability remediation
• Strong research background and an analytical approach, especially with respect to event classification, event correlation, and root cause analysis
• A mentoring/leadership background including mentoring other analysts and orchestrating team efforts for problem solving
• Ability to work independently, manage projects to completion, and lead security initiatives

Benefits Include:  

• Recharge in Style: Need some downtime? We've got your back with self-managed time off to rest, recharge  
• Great Healthcare Coverage : Your well-being is a priority for us. That's why we offer exceptional healthcare coverage to keep you in tip-top shape with 80% employer coverage. 
• Holistic Well-Being : We're not just about the basics. Dive into our holistic well-being programs that cover everything from family planning to much, much more.  
• Fully Stocked Snack Bar for our onsite team  
• ​​Comprehensive Professional Development Benefits: Regular training sessions and workshops, personalized career coaching, opportunities for conferences and seminars, and access to leading online learning platforms for self-paced skill development. 

All candidates must be eligible to work in the U.S. for any employer. We are an E-Verify employer. 

Lumifi welcomes and encourages diversity in our workplace. All qualified applicants will receive consideration for employment without regard to race color, religion, sex, sexual orientation, gender identity, national origin or disability.