Overview
POSITION PROFILE
The Cyber Security Analyst will have a hands-on role performing daily tasks and maintenance to security related systems, as necessary.
The analyst will be responsible for daily tasks and triaging and completing tickets submitted by clients of the organization
Responsibilities
SUMMARY OF KEY RESPONSIBILITIES
- Manage security requests and incidents while continuously communicating with clients
- Take part in client security incidents and vulnerability remediation activities
- Assist in developing best practices for security procedures
- Assess current risks and create steps to secure vulnerable systems
- Demonstrates continued growth in knowledge and skills
- Monitor, investigate and action EDR & SIEM alerts
- Monitor, investigate and action alerts for Microsoft security solutions
- Focused on providing a high-level of client satisfaction
- Consistently brings new ideas for service improvement and increased efficiency to the team
- Rarely needs to escalate issues to a more senior resource
- Passionately looks for opportunities to automate and innovate
- Be able to handle multiple assignments, manage priorities, and meet deadlines
- Have proven client-facing skills developed in a professional environment
- Have experience interacting with project stakeholders and vendors
Other Duties / Projects
As assigned
Qualifications
SKILLS / QUALIFICATIONS
- 3+ years in networking and security related functions
- 3+ years experience with maintaining security solutions
- 3+ years experience with Antivirus, SPAM Filtering, and Firewalls
- 1+ years experience with event analysis
- 1+ years experience with SIEM tools and log analysis
- Experience with Microsoft security solutions (Defender, Sentinel, Security Center, etc.)
- Audit experience is a plus
- Training experience is a plus
- Experience with EDR tools is a plus
- While not required, the following security certifications would be a benefit :
o Certified Information Systems Security Professional (CISSP)
o Certified Information Systems Auditor (CISA)
o Certified Information Security Manager (CISM)
o A+ Security
o A+ Security
o SANS security specific certifications
- GIAC Certified Forensic Examiner (GCFE)
- GIAC Cyber Threat Intelligence (GCTI)
- GIAC Certified Incident Handler Certification (GCIH)
- GIAC Continuous Monitoring Certification (GMON)
- GIAC Defensible Security Architect Certification (GDSA)
- GIAC Certified Enterprise Defender (GCED)
- While not required, the following vendor certifications would be a benefit :
o Certified Cloud Security Professional
o Fortinet Network Security Expert (NSE4-8)
o Cisco Certified Security Professional (CCSP)
o Cisco Certified Network Administrator Security (CCNA-Security)
o Microsoft 365 Security Administration (MS-500)
o Azure Security Engineer Associate (AZ-500)
o Other Microsoft Certifications (SC-200, SC-300, SC-400, SC-900)