Security Analyst

100% on site. Our direct client has an opening for a Security Analyst 5026. This position is up to 13 months with the option of extension. The client is located in Dover, DE. If you are interested, please submit the following: YOUR CURRENT RESUME. YOUR HOURLY RATE. Key Responsibilities: Security Monitoring: Continuously monitor network traffic, system logs, and other security tools to detect unusual or suspicious activities that could indicate an incident or vulnerability. Incident Detection and Response: Identify and categorize security incidents such as malware infections, data breaches, and insider threats. Respond swiftly to contain, mitigate, and resolve incidents. Alert Triage: Assess alerts generated by security tools, determine their severity, and prioritize responses accordingly. Threat Intelligence and Hunting: Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques to enhance monitoring and response efforts. Leverage these findings to conduct proactive threat hunting across SIEM and EDR platforms. Log Analysis: Examine logs from a range of sources including firewalls, intrusion detection systems, antivirus software, and system endpoints to identify irregularities that may signal a threat. Security Tool Management: Operate and manage security technologies such as SIEM systems, IDS/IPS, firewalls, PKI management, and endpoint security solutions. Documentation and Compliance: Maintain accurate records of security incidents and ensure compliance with industry standards and regulations. Collaboration: Work closely with other security and IT professionals to investigate and resolve security issues. Continuous Improvement: Contribute to refining security processes and developing new detection and prevention rules. Required Skills: Technical Proficiency: Strong understanding of IT basics, including operating systems, network protocols, and security tools. Hands-on Experience with Security Tools: Proficiency in using SIEM systems, IDS/IPS, firewalls, antivirus, and endpoint detection tools. Coding Skills: Knowledge of programming languages like Python or PowerShell for automating tasks and creating scripts. Forensics Knowledge: Basic understanding of computer forensics for incident investigation. Log Analysis: Ability to analyze logs to spot patterns and anomalies. Incident Response: Experience in responding to security incidents effectively. Threat Intelligence: Understanding of attack patterns and tactics used by cybercriminals. Communication: Excellent communication skills for reporting and collaboration. Problem-Solving: Strong analytical and problem-solving abilities. Adaptability: Ability to adapt quickly to evolving cyber threats. Qualifications: Education: Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a related field. Experience: Previous experience in a security-related role with a strong understanding of cybersecurity principles and technologies. Certifications: Relevant certifications such as CompTIA Security+ or equivalent are beneficial. #J-18808-Ljbffr