Cyber Defense Analyst — Incident Response & Automation

Vast; Long Beach (CA); Presencial; USD 90.000 - 158.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical coverage

Dental coverage

Vision coverage

401(k) plan

Equity

Paid time off

Meal perks

Onsite meals

Descripción de la vacante

Vast in Long Beach is seeking an Information Security Analyst to own day-to-day triage, investigation, and response for security alerts across the organization. You will work across Windows, macOS, and Linux endpoints, tune alerts, and contribute to post-incident reviews to strengthen detection capabilities.

Reporting to the Information Security Manager, this full-time exempt role supports both corporate and mission environments.

Formación

• 1+ years of hands-on experience in security monitoring or incident response
• Experience on Windows, macOS, and Linux endpoints
• Ability to tune security alerts to reduce false positives
• Knowledge of cloud and on-prem auditing
• Scripting and automation with PowerShell, Bash, or Python
• Knowledge of network protocols, firewalls, and IDS/IPS

Responsabilidades

• Monitor and triage alerts from security tooling across corporate and mission environments
• Investigate suspicious activity, determine scope and impact, and contain or elevate incidents according to the incident response process
• Document incidents, and contribute to post-incident reviews and updates to response procedures
• Tune detection rules and reduce false positives across monitoring tools
• Develop playbooks and automate repetitive triage steps to speed up response
• Carry out vulnerability and exposure checks, and coordinate remediation with system owners
• Work with engineering, IT, and mission teams on security implementations and alert follow-ups

Conocimientos

Security monitoring

Incident response

Windows

macOS

Linux

Scripting

PowerShell

Bash

Python

Cloud auditing

On-prem auditing

IDS/IPS

Firewalls

Descripción del empleo

Vast in Long Beach is seeking an Information Security Analyst to own day-to-day triage, investigation, and response for security alerts across the organization. You will work across Windows, macOS, and Linux endpoints, tune alerts, and contribute to post-incident reviews to strengthen detection capabilities.

Reporting to the Information Security Manager, this full-time exempt role supports both corporate and mission environments.