Information Security Analyst

Monitor, analyze, and respond to security event data from host logs, network traffic, and threat intelligence feeds Respond to critical security alerts Perform incident response from initial detection through containment, eradication, recovery, and post-incident activities Develop new Threat Detections, Playbooks, and SOPs for emerging threats and trends Evaluate and improve security processes, alerting, and tools Identify opportunities for tuning, automation, and workflow streamlining to enhance efficiency and reduce risk Collaborate with stakeholders and provide insightful security analysis Requirements Minimum of 2 years of work experience in Security Monitoring and Incident Response Experience with SIEM systems, including configuration, tuning, optimization, and threat detection creation Understanding of cloud security principles, including Azure security best practices and Microsoft Defender for Azure Familiarity with endpoint detection and response tools such as Crowdstrike Falcon Experience with DLP solutions, including Trellix DLP Knowledge of IAM principles and Microsoft Identity solutions Experience with SOAR tools; Tines experience preferred Proficiency in scripting languages such as Python or PowerShell Ability to analyze complex data sets and identify potential security threats Experience using and leveraging AI capabilities to improve investigation and response workflows Excellent verbal and written communication skills Commitment to ongoing learning and professional development in cybersecurity Knowledge of compliance frameworks such as HIPAA, SOC2, ISO, or PCI-DSS Capacity to work effectively in a dynamic environment with multiple priorities and deadlines Bachelor’s degree preferred, or equivalent combination of education and relevant professional experience Core Competencies Demonstrates expertise in Security Monitoring and Incident Response, with a strong focus on threat detection, incident management, and process improvement. Proficient in leveraging SIEM systems, cloud security principles, and automation tools to enhance security operations. #J-18808-Ljbffr