IT Security Associate Analyst Tier 2 Security Analyst

About You

• Youre a Critical Thinker: You can quickly assess security alerts and incidents prioritizing actions based on risk and impact.
• Youre DetailOriented: Your ability to dig deep into network traffic security logs and threat intelligence helps identify and mitigate potential threats before they escalate.
• You Have a Strong Security Mindset: Passionate about maintaining confidentiality integrity and availability youre committed to protecting information systems from advanced threats.
• You Work Well Under Pressure: You thrive in fastpaced highstakes situations ensuring that incidents are handled with precision and care.
• You Communicate Clearly: Whether in documentation escalation or direct communication with team members and customers you excel in conveying technical issues in a clear actionable manner.
• You Embrace Continuous Learning: Youre always growing your skill set and adapting to new challenges and security practices to stay ahead of emerging threats.
• Youre Passionate About Process Improvement and Mentoring: You actively seek opportunities to enhance workflows improve team efficiency and mentor others sharing your knowledge to elevate the entire teams performance.

Things Youll Do

• Monitor and Respond to Alerts: Analyze and respond to security events including alerts from SIEMs Firewalls IDS/IPS and AntiVirus software ensuring quick and effective action.
• Escalate and Triage Incidents: Act as an escalation point for first responders ensuring that incidents are properly documented analyzed and escalated as needed.
• Investigate Security Threats: Use a variety of security tools to identify assess and remediate threats within customer environments including investigating network traffic endpoint logs and event histories.
• Implement Security Measures: Take action to mitigate attacks such as implementing IP blocks in firewalls and analyzing network traffic to reduce the attack surface.
• Provide Analytical Support: Utilize tools like Wireshark and tcpdump to analyze and characterize network traffic identifying potential security threats and vulnerabilities.
• Collaborate with Teams: Work closely with other security professionals to correlate threat data validate alerts and contribute to the overall improvement of incident response and security practices.
• Create and Improve Documentation and mentor others: Document incident details lessons learned and opportunities for process improvement to ensure continuous enhancement of our security posture.

What You Bring

• Education & Experience: Bachelors degree or 35 years of experience in a SOC or similar IT security role with a strong understanding of network protocols and security concepts.
• Technical Skills: Experience with SIEM tools firewalls IDS/IPS systems antivirus software and security management tools. Handson knowledge of network traffic analysis tools such as Wireshark and tcpdump is a plus.
• Certifications: CompTIA Security Network Linux or SANS GIAC GSEC GCIH or equivalent certifications are preferred.
• HandsOn Experience: Familiarity with various operating systems (UNIX Linux Windows) and the ability to interpret security logs and system data from different platforms.
• Security Knowledge: Solid understanding of incident response procedures security tools and common vulnerabilities as well as industry standards and best practices.

If youre ready to join a dynamic team and play a crucial role in the fight against cyber threats we want to hear from you! Help shape the future of cybersecurity at Digital Hands.