Cyber Intrusion Analyst I

Asurion; Nashville (TN); On-site; USD 60,000 - 80,000; Full time

Job summary

A leading technology security firm in Nashville seeks a security analyst to monitor network security systems, report threats, and assist with incident responses. Applicants should have a BA or BS in Computer Science and at least one year of experience in information security. Knowledge of security protocols, tools, and programming languages is a plus. Strong analytical and communication skills are required for success in this role.

Qualifications

• One or more years of experience in computing and information security.
• Basic understanding of TCP/IP, ICMP, DHCP, DNS protocols.
• Familiarity with OOP languages like Python, Java, or C#.

Responsibilities

• Monitors network intrusion detection and prevention sensors.
• Reports upon relevant threat intelligence.
• Supports forensic investigations and penetration testing.

Skills

Analytical skills

Problem-solving skills

Communication skills

Knowledge of security technologies

Education

BA or BS in Computer Science

MS in Computer Science

Tools

SEIM Tools (e.g., Splunk)

Network Intrusion Detection/Prevention Tools

Forensic tools (e.g., EnCase)

Job description

Responsibilities

• Operates and monitors network intrusion detection and prevention sensors and other information security monitoring infrastructure.
• Collects, assesses, and reports upon relevant threat intelligence / actionable security information and appropriately modifies tactical operations.
• Performs analysis and response to Tier I security relevant alerts and events.
• Assesses network traffic patterns and session data for indicators of malicious activity with assistance.
• Plays a strong supporting role in prompt and effective response to information security incidents.
• Performs operational assessment, prioritization, and remediation of enterprise vulnerabilities and exposures.
• Generates, edits, and delivers reports derived from security tools and Security Operations activities.
• Support of forensic investigations and penetration testing activity.
• Supports the automation and improvement of the overall cloud security posture at Asurion.
• Assists with executing remediation plans for any gaps reported in audits or recommended process improvements that effect core information security services.
• Updates job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining professional networks; participating in professional organizations.
• Performs other related duties as assigned.

Requirements

• BA or BS in Computer Science, Management Information Systems, or related field desirable, practical experience plus education and certifications may be considered.
• MS in Computer Science, Information Systems, or a related field, desired.
• One or more years of progressive experience in computing and information security, including experience with Internet technology, security technology, issue resolution and leading teams in a cross functional, global setting.
• GSEC, GCIA, GCIH, GCFA, or other security related certifications desired.
• Basic understanding of core network protocols (TCP/IP, ICMP, DHCP, DNS, etc)
• Familiarity needed with several key security technologies: SEIM Tools (Splunk, ArcSight, LogLogic), Network Intrusion Detection / Prevention Tools (TippingPoint, SourceFire, Snort, CheckPoint IPS blades, NetWitness, MIR) DLP packages (Symantec Vontu), Host IDS, AV & endpoint management, network anti-malware (FireEye, Palo Alto), Forensic tools (EnCase, FTK, etc).
• Familiarity with common OOP languages desirable (Python, Java, C#, etc.)
• Strong analytical and problem solving skills are necessary.
• The ability to operate under ambiguous circumstances, address uncomfortable issues and leverage data to make informed decisions.
• Excellent communication (oral, written, presentation), interpersonal and consultative skills are required.