Cyber Security Analyst

Information Cyber Security Analyst (Security Operations Center)

We are seeking an Information Cyber Security Analyst to join a 24x7x365 Security Operations Center (SOC) team supporting a large-scale enterprise environment. This role is ideal for a highly technical, self-driven security professional with a passion for threat detection, incident response, and continuous learning.

The successful candidate will monitor, analyze, and respond to a wide range of information security threats, including malware, policy violations, and advanced persistent threats. The analyst will also collaborate closely with Threat Intelligence, Risk Management, and Digital Forensics teams and serve as a mentor to junior analysts.

Key Responsibilities

• Monitor, triage, and respond to concurrent security incidents using SIEM tools, ticketing systems, email, and other alerting mechanisms
• Serve as an initial point of escalation for Security Analyst I team members
• Support all phases of the Incident Response lifecycle in alignment with established frameworks (e.g., NIST, SANS)
• React quickly and decisively in high-stress incident situations

• Perform root cause analysis, document findings, and collaborate with stakeholders to prevent recurrence
• Review and analyze raw data and logs to identify malicious activity where signatures or detection content may not exist
• Research and analyze log sources from firewalls, routers, proxies, antivirus platforms, and operating systems
• Conduct detailed packet analysis and identify traffic obfuscation or encryption techniques used by attackers

• Automate manual security processes using scripting languages
• Assist with development, tuning, and filtering of detection content for SIEM, IDS, and other security technologies
• Participate in documentation maintenance to ensure accuracy of SOC procedures and runbooks
• Work with management to define and update standard operating procedures and response plans

• Support Senior Security Analysts, Team Leads, and leadership during incident response activities
• Train, mentor, and provide oversight for Security Analyst I team members
• Collaborate effectively with cross-functional technical teams

Required Qualifications

• 2+ years of professional information security experience (or equivalent)
• 25 years of IT experience in a technical role
• Strong understanding of computer networking concepts (TCP/IP, routing, protocols)
• Hands-on experience analyzing logs from security and network devices
• Proficiency with Windows and Unix/Linux command-line environments
• Detailed understanding of packet structure and experience performing in-depth packet analysis
• Strong knowledge of information security best practices and defensive technologies
• Familiarity with standardized incident response frameworks (NIST, SANS)
• Strong analytical and research skills with an emphasis on event correlation and root cause analysis
• Excellent written and verbal communication skills
• High ethical standards and sound judgment
• Ability to work independently, prioritize tasks, and multitask effectively
• Willingness to participate in shift-based work in a 24x7 SOC environment

Preferred Technical Skills

• CompTIA Network+ and Security+, or equivalent knowledge/experience
• Scripting experience with Python, Perl, SQL, and/or PowerShell
• Experience mentoring junior security analysts
• Knowledge of attacker obfuscation techniques for malicious traffic or data
• Experience with SIEM, IDS/IPS, and incident tracking platforms

Preferred Qualifications (Not Required)

• Associate's or Bachelor's degree in Computer Science or a related discipline, or equivalent experience
• Industry-recognized certifications such as SANS GCIH, GCIA, or equivalent