Cyber Security Analyst

Now outside agencies please!

This Cybersecurity Analyst provides technical expertise in managing and analyzing cybersecurity critical assets and incident response functions along with penetration testing and analysis. This role will be responsible for all steps of the Incident Response lifecycle including preparation, detection, containment, eradication, remediation, and lessons learned.

How You’ll make an impact.

• Perform security monitoring and incident response activities across the networks, leveraging a variety of tools and techniques.
• Detect incidents through proactive “hunting” across security-relevant data sets using a variety of modern tools and methods.
• Investigate security incidents, analyze root causes, and implement corrective actions.
• Conduct regular risk assessments and vulnerability scans to identify weaknesses in systems, networks, and applications.
• Remediate identified vulnerabilities from multiple sources.
• Conduct internal audits to ensure compliance with cybersecurity policies and regulatory requirements.
• Thoroughly document incident response analysis activities.
• Develop new, repeatable methods for finding malicious activity across the networks.
• Provide recommendations to enhance detection and protection capabilities.
• Continually develop new technical skills and push overall team capabilities forward.
• Be innovative with their understanding of attack methodologies, malware analysis, malicious toolkits, and how those may manifest within various security technologies.
• Review of defensive and detective controls to reduce client attack surface.

What we're hiring for.

• Cybersecurity professional with 3 or more years of operational experience assessing, reviewing, and remediating, infrastructure vulnerabilities, CVE’s, and risks.
• Knowledge of Microsoft Security Suite focusing on Microsoft 365 Defender for endpoints, Defender for Cloud Apps, and Microsoft Defender for Cloud.
• Knowledge of CrowdStrike Falcon and Sumo Logic a plus.
• Knowledge of third-party software vulnerabilities, security threat landscape, especially network and server threats.
• Experience with and understanding of CVE’s and CVSS scores.
• Be well versed in the cyber threat landscape; have an advanced understanding and knowledge of what tactics and techniques are being used by adversaries; have an advanced understanding and knowledge of what security controls and/or telemetry data is available to detect these tactics and techniques; and be familiar with cyber security incident response terminology, processes, and techniques.
• Knowledge of Information Security frameworks, guidelines, and standard methodologies.
• Knowledge of the Windows and / or Linux operating systems
• Knowledge and understanding of Cybersecurity controls and logging and monitoring tools.
• Participates in threat response activities such as quarantining host and other common response playbook activities.
• Extensive alert triage and endpoint investigations using technologies such as CrowdStrike and Defender 365 for Endpoint.
• Malware analysis (does not include reverse engineering).
• MITRE attack framework expertise and understanding of common attack tactics used by threat actors.
• Provide recommendations on tuning of security detection platforms and use cases to improve accuracy of detection.

• Dashboards, Metrics, & Power BI Reporting
• Build and maintain security dashboards in Power BI (KPIs, trending, SLA performance, coverage metrics, incident volumes, alert fidelity).
• Create executive and operational reporting packages (weekly/monthly): risks, notable incidents, top detections, improvement actions, and status of remediation.
• Integrate/normalize data from security tools (exports, APIs, log sources where available) into Power BI datasets, ensuring data quality and repeatability.