Cyber Monitoring Analyst (Tier 2)

The Cyber Monitoring Analyst will be part of the Cyber Operations team that is responsible for monitoring and investigating alerts to identify potential incidents. The individual will be required to work closely with other members of the Cyber Operations team to ensure the successful delivery of the alert monitoring, triage, and escalation. Specifically, the Cyber Monitoring Associate will have the following key responsibilities:

• Perform real-time analysis and correlation of logs/alerts.
• Follow detailed operational procedures to appropriately analyze, escalate, and assist in remediation of security events.
• Utilize multiple security technologies to investigate and analyses alerts.
• Deliver timely and detailed documentation related to any incident including the findings, review, and follow-up activities
• Participate in the creation,modification and maintenance of all Cyber Monitoring policies and procedures
• Keep abreast of cyber security trends and the emerging threat landscape in general

What the ideal candidate looks like:

• 3-4 years of experience in IT, IT Security, Security, Technical helpdesk, Security Operations are preferred
• Understanding various Cloud technologies such as Azure, AWS, GCP is highly desirable
• Understanding of Splunk, EDR(MC65), SOC
• Understanding of Web Access Firewalls (WAF) will be preferable
• Strong oral and written communication skills including the ability to interact directly with individuals that do not have an IT background.
• Intermediate knowledge of endpoint and network security concepts and tools preferred.
• Knowledge of ServiceNow.
• Experience with event monitoring and security reporting.
• Ability to exercise sound technical, interpersonal, and organizational judgment while evaluating and solving complex problems.
• Attention to detail.
• Action-oriented attitude and willingness to roll up sleeves.
• Integrity and the highest ethical standards.
• Courage of convictions and the ability to respectfully debate the status quo.