Information Security Analyst
Information Security Analyst
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Job Description
Job Title: Information Security Analyst - Threat & Vulnerability Management
Project Overview
The Information Security Analyst will support key cybersecurity initiatives including SIEM operations automation incident response processes and integration of security tools. This role is critical to advancing our security operations and maturity.
- Contribute to the development of cybersecurity strategies objectives and project plans
- Assist with design and implementation of improved cybersecurity processes and services
- Administer and maintain cybersecurity technology platforms for the Elections Administrative Department and the Enclave Department
- Fulfill customer requests and support daily security operations including incident monitoring analysis and response
- Analyze cybersecurity threats and vulnerabilities and develop appropriate mitigation strategies
- Create documentation including procedures job aids reports metrics and presentations
- Participate in Cybersecurity Incident Response Team (CIRT) investigations and activities
Scheduled Milestones & Deliverables
- Enhance maturity of SIEM SOC and Incident Response processes
- Integrate automation best practices
- Improve Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR)
Performance Metrics
- Completion of projects related to SIEM and other security platforms (e.g. incidents alerts tickets)
- Availability and uptime of systems
- SOC effectiveness
- Compliance with defined processes and procedures
Requirements
Highlighted Requirements
- 2 years of SIEM experience preferably with Azure Sentinel and Kusto Query Language (KQL)
- Multi-year direct experience in Incident Response ideally in an Incident Response Team or MSSP setting for medium to large organizations
- Practical experience with tools within the Microsoft security stack
Key Skills
- Cyber Incident Response
- KQL Deep understanding and hands-on experience
- SOC Analyst / Operations Level 1 2 and 3 (Triage Escalation)
- SIEM Administration Managing maintaining creating custom detections/logging
- SentinelOne In-depth knowledge for incident handling hunting queries and detections
- Linux Administration Comfortable with navigation configuration and server management
- Microsoft Cloud Security Tools Understanding of architecture and platform use
Additional Skills
- Data analysis and reporting
Education
- Required: High School diploma or GED equivalent
- Preferred: Bachelor s degree or currently pursuing a degree in Information Systems Information Assurance Cybersecurity IT Computer Science or a related field
Certifications
- Required/Preferred:
- CompTIA Security
- CompTIA Network
- Other relevant industry certifications
Experience
- Minimum of 5 years of progressive work experience in Information Security IT Computer Science or a related field
Highlighted Requirements 2+ years of SIEM experience, preferably with Azure Sentinel and Kusto Query Language (KQL) Multi-year, direct experience in Incident Response, ideally in an Incident Response Team or MSSP setting for medium to large organizations Practical experience with tools within the Microsoft security stack Key Skills Cyber Incident Response KQL Deep understanding and hands-on experience SOC Analyst / Operations Level 1, 2, and 3 (Triage, Escalation) SIEM Administration Managing, maintaining, creating custom detections/logging SentinelOne In-depth knowledge for incident handling, hunting, queries, and detections Linux Administration Comfortable with navigation, configuration, and server management Microsoft Cloud Security Tools Understanding of architecture and platform use Additional Skills Data analysis and reporting
Education
Required: High School diploma or GED equivalent Preferred: Bachelor s degree or currently pursuing a degree in Information Systems, Information Assurance, Cybersecurity, IT, Computer Science, or a related field Certifications Required/Preferred: CompTIA Security+ CompTIA Network+ Other relevant industry certifications Experience Minimum of 5 years of progressive work experience in Information Security, IT, Computer Science, or a related field
Employment Type
Full Time
