The Information Security Analyst will focus on real-time alert monitoring and incident response utilizing tools such as SIEM MDR network monitoring email security and phishing detection systems. They will analyze security alerts to determine the nature and severity of potential incidents executing rapid response actions to contain and mitigate threats. This role involves collaborating with senior security team members for incident escalation and coordination ensuring effective communication and resolution. Additionally the analyst will regularly review and optimize security alert rules to reduce false positives and enhance threat detection accuracy.
- Real-time Alert Monitoring: Continuously monitor security alerts and events from various tools such as SIEM MDR and network monitoring systems to identify potential threats and anomalies.
- Incident Detection and Analysis: Utilize advanced techniques and tools including email security and phishing detection systems to analyze security alerts and determine the nature and severity of potential incidents prioritizing response efforts based on the level of risk.
- Immediate Response Actions: Execute rapid response actions using automated and manual techniques to contain and mitigate security incidents including isolating affected systems and blocking malicious activity.
- Incident Escalation and Coordination: Collaborate with senior security team members and other IT departments to escalate and coordinate the response to significant security incidents ensuring effective communication and resolution.
- Alert Tuning and Optimization: Regularly review and fine-tune security alert rules and configurations across various tools such as SIEM MDR and email security systems to reduce false positives and enhance the accuracy of threat detection.
Qualifications :
Bachelors Degree in a technology based area such as Computer Science preferred.
Security certification (i.e. SSCP CISSP or equivalent) ITIL & systems certifications and/or industry certifications preferred
Number of years: 1-2 years systems administration experience. Training or experience with cyber security related technologies such as CrowdStrike SIEM technologies Rapid7 and other security based products. Experience supporting QAD products and related technologies desired but not required.
Computer skills:
Protocols/Port usage and configurations. Recent hands-on network firewall VMware AWS Windows and Linux System Administration experience (Red Hat Enterprise Linux Versions highly preferred). Networking knowledge & experience (such as but not limited to Wireshark tcpdump netsniff-ng BURP NMAP etc). SSH & Remote Desktop Technologies. Experience with database administration or familiarity with dba practices would be a plus.
Other knowledge:
Ability to prioritize security issues/risks by their risk level to the organization. Ability to ramp up quickly and work in fast-paced environment. Excellent communication and customer service skills. Ability to research review and understand security based technologies and configuration changes. Experience with penetration testing/remediation
Additional Information :
QAD Inc. is a leading provider of adaptive cloud-based enterprise software and services for global manufacturing companies. Global manufacturers face ever-increasing disruption caused by technology-driven innovation and changing consumer order to survive and thrive manufacturers must be able to innovate and change business models at unprecedented rates of speed. QAD calls these companies Adaptive Manufacturing Enterprises. QAD solutions help customers in the automotive life sciences packaging consumer products food and beverage high tech and industrial manufacturing industries rapidly adapt to change and innovate for competitive advantage.
QAD is committed to ensuring that every employee feels they work in an environment that values their contributions respects their unique perspectives and provides opportunities for growth regardless of background. QADs DEI program is driving higher levels of diversity equity and inclusion so that employees can bring their whole self to work.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race color sex age national origin religion sexual orientation gender identity status as a veteran and basis of disability or any other federal state or local protected class.
About QAD:
QAD Inc. is a leading provider of adaptive cloud-based enterprise software and services for global manufacturing companies. Global manufacturers face ever-increasing disruption caused by technology-driven innovation and changing consumer order to survive and thrive manufacturers must be able to innovate and change business models at unprecedented rates of speed. QAD calls these companies Adaptive Manufacturing Enterprises. QAD solutions help customers in the automotive life sciences packaging consumer products food and beverage high tech and industrial manufacturing industries rapidly adapt to change and innovate for competitive advantage.
QAD is committed to ensuring that every employee feels they work in an environment that values their contributions respects their unique perspectives and provides opportunities for growth regardless of background. QADs DEI program is driving higher levels of diversity equity and inclusion so that employees can bring their whole self to work.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race color sex age national origin religion sexual orientation gender identity status as a veteran and basis of disability or any other federal state or local protected class.
Remote Work :
No
Employment Type :
Full-time
The Information Security Analyst will focus on real-time alert monitoring and incident response utilizing tools such as SIEM MDR network monitoring email security and phishing detection systems. They will analyze security alerts to determine the nature and severity of potential incidents executing r...
The Information Security Analyst will focus on real-time alert monitoring and incident response utilizing tools such as SIEM MDR network monitoring email security and phishing detection systems. They will analyze security alerts to determine the nature and severity of potential incidents executing rapid response actions to contain and mitigate threats. This role involves collaborating with senior security team members for incident escalation and coordination ensuring effective communication and resolution. Additionally the analyst will regularly review and optimize security alert rules to reduce false positives and enhance threat detection accuracy.
- Real-time Alert Monitoring: Continuously monitor security alerts and events from various tools such as SIEM MDR and network monitoring systems to identify potential threats and anomalies.
- Incident Detection and Analysis: Utilize advanced techniques and tools including email security and phishing detection systems to analyze security alerts and determine the nature and severity of potential incidents prioritizing response efforts based on the level of risk.
- Immediate Response Actions: Execute rapid response actions using automated and manual techniques to contain and mitigate security incidents including isolating affected systems and blocking malicious activity.
- Incident Escalation and Coordination: Collaborate with senior security team members and other IT departments to escalate and coordinate the response to significant security incidents ensuring effective communication and resolution.
- Alert Tuning and Optimization: Regularly review and fine-tune security alert rules and configurations across various tools such as SIEM MDR and email security systems to reduce false positives and enhance the accuracy of threat detection.
Qualifications :
Bachelors Degree in a technology based area such as Computer Science preferred.
Security certification (i.e. SSCP CISSP or equivalent) ITIL & systems certifications and/or industry certifications preferred
Number of years: 1-2 years systems administration experience. Training or experience with cyber security related technologies such as CrowdStrike SIEM technologies Rapid7 and other security based products. Experience supporting QAD products and related technologies desired but not required.
Computer skills:
Protocols/Port usage and configurations. Recent hands-on network firewall VMware AWS Windows and Linux System Administration experience (Red Hat Enterprise Linux Versions highly preferred). Networking knowledge & experience (such as but not limited to Wireshark tcpdump netsniff-ng BURP NMAP etc). SSH & Remote Desktop Technologies. Experience with database administration or familiarity with dba practices would be a plus.
Other knowledge:
Ability to prioritize security issues/risks by their risk level to the organization. Ability to ramp up quickly and work in fast-paced environment. Excellent communication and customer service skills. Ability to research review and understand security based technologies and configuration changes. Experience with penetration testing/remediation
Additional Information :
QAD Inc. is a leading provider of adaptive cloud-based enterprise software and services for global manufacturing companies. Global manufacturers face ever-increasing disruption caused by technology-driven innovation and changing consumer order to survive and thrive manufacturers must be able to innovate and change business models at unprecedented rates of speed. QAD calls these companies Adaptive Manufacturing Enterprises. QAD solutions help customers in the automotive life sciences packaging consumer products food and beverage high tech and industrial manufacturing industries rapidly adapt to change and innovate for competitive advantage.
QAD is committed to ensuring that every employee feels they work in an environment that values their contributions respects their unique perspectives and provides opportunities for growth regardless of background. QADs DEI program is driving higher levels of diversity equity and inclusion so that employees can bring their whole self to work.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race color sex age national origin religion sexual orientation gender identity status as a veteran and basis of disability or any other federal state or local protected class.
About QAD:
QAD Inc. is a leading provider of adaptive cloud-based enterprise software and services for global manufacturing companies. Global manufacturers face ever-increasing disruption caused by technology-driven innovation and changing consumer order to survive and thrive manufacturers must be able to innovate and change business models at unprecedented rates of speed. QAD calls these companies Adaptive Manufacturing Enterprises. QAD solutions help customers in the automotive life sciences packaging consumer products food and beverage high tech and industrial manufacturing industries rapidly adapt to change and innovate for competitive advantage.
QAD is committed to ensuring that every employee feels they work in an environment that values their contributions respects their unique perspectives and provides opportunities for growth regardless of background. QADs DEI program is driving higher levels of diversity equity and inclusion so that employees can bring their whole self to work.
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race color sex age national origin religion sexual orientation gender identity status as a veteran and basis of disability or any other federal state or local protected class.
Remote Work :
No
Employment Type :
Full-time
View more
View less