Cybersecurity Analyst

Provalus; Jasper (TX); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Paid time off

Referral program

Vision insurance

Job summary

Provalus seeks a SOC Analyst to provide 24x7 cybersecurity support for clients in a secure environment. The role focuses on triaging security incidents, documenting findings, and delivering incident reports while improving security measures within a collaborative, team-driven setting.

The ideal candidate has 1+ years of cyber security experience or a recent bachelor’s in cyber security, with knowledge of SIEM, firewalls, and cloud security, and must be flexible to work the Sunday-Wednesday

Qualifications

• 1+ years of incident analysis, security architecture, malware research, SOC, or similar incident response experience preferred OR recent 4 year degree in Cyber Security required.
• Fundamental understanding of security tools such as SIEM, IDS/IPS, web proxies, DLP, CASB, SIEM, DNS security, DDoS protection, and firewalls.
• Fundamental understanding of cloud security and responding to cloud alerts/events.
• Knowledge of NIST and MITRE ATT&CK security frameworks.
• Knowledge of Microsoft Windows systems including active directory and Unix systems.
• Experience analyzing and inspecting log files, network packets, and other security tool information output from multiple system types.
• Familiar with basic reverse engineering principles and understanding of malware, rootkits, TCP/UDP packets, network protocols.
• Team-oriented and skilled in working within a collaborative environment.
• Ability to effectively multi-task, prioritize and execute tasks in a high-pressure environment.
• Required flexibility to work nights, weekends, and/or holiday shifts in the event of an incident response emergency.
• Experience with technical analysis of email headers, links, and attachments to determine if an email is malicious, and then executing remediation techniques to protect the environment.
• One or more of the following certifications are recommended: CompTIA Security +; CompTIA Network +; Information systems Security Professional (CISSP); SANS-GIAC certification (Security Essentials/GCIH, GCED, GCIA, GNFA); EC-Council (CEH)

Responsibilities

• Assist with the delivery of assigned SOC deliverables and related log collection and analysis tools.
• Support the creation, documentation, and implementation of security policies, procedures and practices.
• Conduct proactive research and investigations to identify threats/vulnerabilities and identify remediation/mitigation procedures.
• Collaborate with other IT teams/users to identify and resolve security-related issues.
• Assist project teams with performing risk and vulnerability assessments on business processes and infrastructure systems, developing resolution/mitigation plans.
• Participate in technical meetings to address malware, threats, vulnerabilities, and cybersecurity preparedness.
• Collaborate with peers to identify improvements and tuning opportunities for monitoring use cases or signatures.

Skills

Incident analysis

Security tools knowledge

Cloud security understanding

Team collaboration

Multi-tasking under pressure

Education

Recent Bachelor's degree in Cyber Security

Tools

SIEM

IDS/IPS

Web proxies

DLP

CASB

DNS security

Firewalls

Windows Active Directory

Unix systems

Job description

SOC Analyst will provide Cyber Security support for Provalus clients within a 24x7 secure environment. This position is perfect for someone with a willingness to acquire in-depth knowledge of network and host security technologies and products (such as endpoint, network, email security) and continuously improve those skills. The right candidate must have at least 1+ years of current Cyber Security experience OR a recent 4 year degree in Cyber Security and must have the ability to clearly triage security-related issues, document and explain technical details including incident documentation and related deliverables, and have a team-driven approach towards continual improvement and problem solving.

Shift: Sunday - Wednesday 2pm - 12am

• 1+ years of incident analysis, security architecture, malware research, SOC, or any other similar incident response experience preferred OR recent 4 year degree in Cyber Security required
• Fundamental understanding of security tools such as SIEM, IDS/IPS, web proxies, DLP, CASB, SIEM, DNS security, DDoS protection, and firewalls
• Fundamental understanding of cloud security and responding to cloud alerts/events
• Knowledge of NIST and MITRE ATT&CK security frameworks
• Knowledge of Microsoft Windows systems including active directory and Unix systems
• Experience analyzing and inspecting log files, network packets, and any other security tool information output from multiple system types
• Familiar with basic reverse engineering principles and understand of malware, rootkits, TCP/UDP packets, network protocols
• Team-oriented and skilled in working within a collaborative environment
• Ability to effectively multi-task, prioritize and execute tasks in a high-pressure environment
• Required flexibility to work nights, weekends, and/or holiday shifts in the event of an incident response emergency
• Experience with technical analysis of email headers, links, and attachments to determine if an email is malicious, and then executing remediation techniques to protect the environment
• One or more of the following certifications are recommended: CompTIA Security +; CompTIA Network +; Information systems Security Professional (CISSP); SANS-GIAC certification (Security Essentials/GCIH, GCED, GCIA, GNFA); EC-Council (CEH)

Key responsibilities

• Assisting with the delivery of assigned SOC deliverables and related log collection and analysis tools.
• Supporting the creation, documentation, and implementation of security policies, procedures and practices.
• Conducting proactive research and investigations to identify threats/vulnerabilities and identify remediation/mitigation procedures.
• Collaborating and working closely with other IT teams/users to identify and resolve security-related issues.
• Assisting project teams with performing risk and vulnerability assessments on business processes and infrastructure systems. Working with appropriate parties to develop appropriate resolution and/or mitigation plans.
• Participate in technical meetings and working groups to address issues related to malware, threats, vulnerabilities, and cybersecurity preparedness
• Collaborate with peers and multiple teams to identify improvements and identify areas for tuning use cases or signatures to enhance monitoring value

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Referral program
• Vision insurance

Work Location: In person