Analyst
Share
Job Location:
Monthly Salary:
Posted on:
20 hours ago
Vacancies:
1 Vacancy
Job Summary
At CDW we make it happen together. Trust connection and commitment are at the heart of how we work together to deliver for our customers. Its why were coworkers not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where were headed. Were proud to share our story and Make Amazing Happen at CDW.
JOB SUMMARY:
The Security Analyst who provides dedicated technical client support such as monitoring and analysis capability for SOC operations and Incident Response. The Security Analyst will conduct analysis of security events to include validation investigation escalation and reporting of events of interest based on the guidelines and event handlers provided to them. The Security Analyst will be responsible for all such events of interest and will make sure they are continuously monitored and reviewed. The Security Analyst upholds defined service level agreements (SLA) and customer service excellence.
Key Responsibilities:
- Monitoring and analysis of cyber security events
- Fully operate from Cradle to Grave the incident response process.
- Excellent understanding about Windows and Linux OS internals.
- Excellent knowledge of protocols like HTTP HTTPS TCP/IP WebSocket SSH SFTP RDP etc.
- Good understanding of the industry models such as the Cyber Kill Chains Diamond Model and MITRE ATT&CK framework.
- Practical hands-on experience analysing windows & Linux artifacts produced from digital forensics and incident response.
- Good understanding of cyber threat landscape TTPs threat actors and groups.
- Ensure Security Incidents are raised and managed in line with defined processes.
- To escalate incidents and appropriately manage and record them.
- Handling of security incidents and taking ownership.
- Proactively manage internal and external security services to identify threats to infrastructure and services including Log Management.
- Proficiency with the following tools:
- EDR
- Anti-Virus/NGAV
- HIPS ID/PS DLP WAF
- SIEM - Log Rhythm QRadar and Splunk
- Experience with SIEM technologies (Splunk etc) Threat hunting monitoring and investigations.
- Communicate new ideas or suggestions for analysis/process improvement.
- Deep understanding of logging mechanisms of Windows Linux platforms.
- Participate in a 24x7 (On-Call) coverage model to prevent and remediate security threats.
- Knowing how to Script in languages such as Python Powershell Bash to build incident response workflows and automation is a plus.
- Have excellent written and verbal communication skills.
- Possess good technical understanding takes initiative to remain up to date with cyber security skills and fosters an attitude of continual learning/adapting.
- Possess the ability to adjust and adapt to changing priorities in a dynamic environment.
- Knowledge of and experience with Palo Alto Checkpoint or Cisco firewalls is a plus.
- Ability to work with minimum guidance.
Experience:
Security Operations Centre (SOC) environment experience with at least 3 years of experience detecting and responding to cyber intrusions in an Operations Technology environment.
Bachelors degree or equivalent combination of education and 3 years of experience in computer science computer engineering or related field.
Certifications:
List of Certificates are knowledge equal to it.
SANS GIAC; GCED; GCIH; GCFA; GREM; GIAC GOLD. ISC CCFP; CSIH. EC Council ECSA; CHFI; ECIH CompTIA CYSA; Sec N Palo Alto Cisco and Checkpoint certificates
Its good to have at least anyone of the above listed certs is a plus but not mandatory.
Physical Requirements If Applicable:
Provide 24x7 support coverage and work on weekends and STATE Holidays.
General Office Duties.
We make technology work so people can do great things.
CDW is a leading multi-brand provider of information technology solutions to business government education and healthcare customers in the United States the United Kingdom and Canada. A Fortune 500 company and member of the S&P 500 Index CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. Together we unite. Together we win. Together we thrive.
CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race color religion sex sexual orientation gender identity national origin disability status protected veteran status or any other basis prohibited by state and local law.
Required Experience:
IC
Key Skills
- ArcGIS
- Intelligence Community Experience
- GIS
- Python
- Computer Networking
- Data Collection
- Intelligence Experience
- R
- Relational Databases
- Analysis Skills
- Data Management
- Application Development
About Company
CDW UK is a leading IT company which brings together the right technology & expertise to solve your most complex organisational challenges. Our consulting, cloud & integrated technology solutions, and managed services help you drive & manage innovation.
