As a Senior Security Operations Analyst, you’ll be at the forefront of our security initiatives, tackling complex challenges and implementing innovative solutions to protect our digital infrastructure.
Your expertise will be pivotal in enhancing and automating our security operations, ensuring robust incident response, and supporting our cloud security measures.
As a Sr. Security Operations Analyst, you will be responsible for:
Security Operations Management: Oversee the Security Information and Event Management (SIEM) system, triaging alerts, and responding to security incidents effectively.
Threat Hunting: Proactively detect and mitigate potential security threats within our environment.
Incident Response: Participate in and support incident response activities, ensuring timely and efficient handling of security incidents.
Cloud Security Support: Provide security support and response for Amazon Web Services (AWS) to maintain and enhance our cloud security posture.
Security Automation: Develop and refine security orchestration and automation processes to improve the efficiency and effectiveness of our security operations.
Endpoint Security: Tune and refine Endpoint Detection and Response (EDR) workflows to optimize our endpoint security measures.
InfoSec Tasks: Perform various InfoSec tasks related to Mobile Device Management (MDM) to ensure the security of our mobile devices.
Cloud Operations: Contribute to cloud security operations across AWS, Google Cloud Platform (GCP), and Azure.
Stakeholder Support: Handle inbound security inquiries, providing timely and accurate responses to internal and external stakeholders.
Your expertise will be pivotal in enhancing and automating our security operations, ensuring robust incident response, and supporting our cloud security measures.
As a Sr. Security Operations Analyst, you will be responsible for:
Security Operations Management: Oversee the Security Information and Event Management (SIEM) system, triaging alerts, and responding to security incidents effectively.
Threat Hunting: Proactively detect and mitigate potential security threats within our environment.
Incident Response: Participate in and support incident response activities, ensuring timely and efficient handling of security incidents.
Cloud Security Support: Provide security support and response for Amazon Web Services (AWS) to maintain and enhance our cloud security posture.
Security Automation: Develop and refine security orchestration and automation processes to improve the efficiency and effectiveness of our security operations.
Endpoint Security: Tune and refine Endpoint Detection and Response (EDR) workflows to optimize our endpoint security measures.
InfoSec Tasks: Perform various InfoSec tasks related to Mobile Device Management (MDM) to ensure the security of our mobile devices.
Cloud Operations: Contribute to cloud security operations across AWS, Google Cloud Platform (GCP), and Azure.
Stakeholder Support: Handle inbound security inquiries, providing timely and accurate responses to internal and external stakeholders.
Requirements:
4+ years of experience in security operations.
Strong knowledge of threat-hunting practices and incident response in cloud environments.
Proficiency with SIEM tools and cloud security (AWS, GCP, Azure).
Familiarity with attack frameworks and mitigation strategies.
Experience working with Structured Query Language (SQL) is a plus.
Scripting ability (Python, Powershell, etc.) for automation.
Strong analytical and problem-solving skills.
Excellent communication and teamwork abilities.
Security certifications like Security+, GCFE, GCFA, or similar are a plus.
4+ years of experience in security operations.
Strong knowledge of threat-hunting practices and incident response in cloud environments.
Proficiency with SIEM tools and cloud security (AWS, GCP, Azure).
Familiarity with attack frameworks and mitigation strategies.
Experience working with Structured Query Language (SQL) is a plus.
Scripting ability (Python, Powershell, etc.) for automation.
Strong analytical and problem-solving skills.
Excellent communication and teamwork abilities.
Security certifications like Security+, GCFE, GCFA, or similar are a plus.
This position is open to all candidates.