Cyber Defense Operations Specialist

Vantor Inc.; Westminster (CO); On-site; USD 105,000 - 154,000; Full time

Benefits offered by this job

401(k) match

Mental health resources

Student loan repayment assistance

Adoption reimbursement

Pet insurance

Job summary

Vantor is seeking a Cybersecurity Analyst to join its Cyber Security team in Westminster, CO. You will support continuous monitoring, triage, and incident response across the Vantor environment, working with MSSP analysts and Vantor IT teams to identify intrusions and coordinate timely corrective actions.

You will administer monitoring technologies, including log management and SIEM, and help tune alerts while occasionally traveling up to 15%.

Qualifications

• General knowledge of network and system/application architecture and administration principles.
• General knowledge of monitoring-system architecture including SIEM and log-management architecture.
• Understanding of trends in attacker and threat-actor tools, techniques and procedures.

Responsibilities

• Interact with MSSP analysts to conduct triage and initial analysis of real-time data feeds and alerts.
• Escalate potential cybersecurity incidents to Senior Cyber Operations Analysts.
• Perform and coordinate information gathering and analysis to support IT teams.
• Coordinate with IT Operations and MSSP to resolve issues affecting log-source generation and monitoring.
• Represent Vantor in the administration and management of monitoring tech, including SIEM alerting systems.
• Implement and maintain monitoring changes, onboarding log sources and tuning alerts.

Skills

Network architecture

Threat awareness

Incident response

On-call readiness

Education

Bachelor's degree in Information Security / CS

Tools

AWS

Python

Bash

SIEM

Job description

Vantor is seeking a Cybersecurity Analyst to join its Cyber Security team in Westminster, CO. You will support continuous monitoring, triage, and incident response across the Vantor environment, working with MSSP analysts and Vantor IT teams to identify intrusions and coordinate timely corrective actions.

You will administer monitoring technologies, including log management and SIEM, and help tune alerts while occasionally traveling up to 15%.