Cybersecurity Analyst

Cybersecurity Operations Analyst

We are seeking a Cybersecurity Operations Analyst to join American Tower's corporate Information Security team. The team protects the confidentiality, integrity, and availability of data and systems in core systems and platforms. The ideal candidate will possess strong tactical and analytical abilities, along with a deep understanding of cybersecurity principles and incident response procedures. In this role, you will use Microsoft Sentinel to oversee the identification, analysis, containment, and remediation of complex security events and work closely with managed detection and response partners.

Track and analyze key performance indicators and security metrics to measure the effectiveness of the Security Operations Center's ("SOC") operations and identify areas for improvement.

Utilize Microsoft Sentinel to conduct in-depth analyses of security events and alerts escalated from lower-tier analysts, identifying threats and assessing their impacts.

Use Microsoft Sentinel to develop and implement runbooks, event response plans and procedures including containment, eradication, and recovery strategies to minimize the impact of security incidents and restore normal operations.

Serve as a subject matter expert on Microsoft Sentinel, Microsoft Defender for Endpoint and Office, and other security technologies, providing guidance and recommendations to enhance the company's defensive capabilities.

Collaborate with internal stakeholders and external partners to investigate security incidents, gather evidence, and support legal and regulatory compliance requirements.

Stay up to date on emerging cybersecurity threats and trends, proactively identifying potential risks and vulnerabilities and recommending preventive measures and countermeasures.

Work with the IT department and internal and external business partners to ensure security is factored into the evaluation, selection, installation and configuration processes of hardware and software.

Bachelor's degree or equivalent experience required.

Minimum of 4 years of cybersecurity experience, with a focus on incident response and security operations within a SOC environment required.

Hands-on experience with Microsoft Sentinel or other security information and event management platforms required.

Strong analytical and problem-solving skills, with the ability to investigate and analyze complex security incidents, identify root causes, and recommend remediation actions.

Ability to communicate technical details concisely for the appropriate audience.

Approximately 5% travel may be required to support the position's responsibilities.

Strong written and oral communication skills, including the ability to present ideas and suggestions clearly and effectively.

Ability to work with different functional groups and levels of employees to achieve results effectively and professionally.

Strong organizational skills; ability to accomplish multiple tasks within the agreed upon timeframes through effective prioritization of duties and functions in a fast-paced environment.