Hybrid Cyber Threat Analyst — Investigations & Response

Georgia Power Company; Atlanta (GA); Híbrido; USD 90.000 - 120.000; Jornada completa

Descripción de la vacante

Southern Company is seeking a Cyber Threat Analyst in Atlanta, GA. The role requires monitoring and investigating cybersecurity events, applying MITRE ATT&CK concepts, and coordinating containment and escalation with SOC teams.

The analyst works onsite with some remote flexibility, contributing to threat analysis procedures, playbooks, and post-incident reviews within a collaborative SOC environment.

Formación

• 3–4 years of relevant experience in cybersecurity, security operations, incident investigation, threat analysis, or a related technical field.
• Experience in multiple areas such as endpoint, network, identity, cloud security analysis, email/phishing analysis, and SIEM/SOAR or security case-management tech.
• Ability to investigate security events and determine significance, scope, and potential impact of observed activity.
• Ability to identify post-compromise activity beyond the initial alert.
• Familiarity with MITRE ATT&CK, NIST, Kill Chain concepts, and incident-response methodologies.

Responsabilidades

• Monitor and respond to cybersecurity events through SIEM/SOAR platforms, security tools, and user submissions.
• Apply threat-analysis concepts and MITRE ATT&CK when evaluating behavior and findings.
• Initiate hunting or additional investigative activity to identify related threats.
• Own assigned security cases from acknowledgment to resolution or handoff.
• Perform containment or remediation actions and coordinate with stakeholders.
• Escalate security events according to severity and escalation criteria.
• Maintain documentation of investigative steps, evidence, findings, and decisions.
• Monitor and investigate suspicious email activity, links, attachments, and phishing indicators.
• Identify false positives and opportunities to improve investigations and workflow.
• Provide feedback to Detection Engineering and Automation to improve SOC visibility.

Conocimientos

Threat analysis

SIEM/SOAR

Incident response

Team collaboration

Herramientas

SIEM/SOAR platforms

EDR/XDR tooling

Network analysis tools

Descripción del empleo

Southern Company is seeking a Cyber Threat Analyst in Atlanta, GA. The role requires monitoring and investigating cybersecurity events, applying MITRE ATT&CK concepts, and coordinating containment and escalation with SOC teams.

The analyst works onsite with some remote flexibility, contributing to threat analysis procedures, playbooks, and post-incident reviews within a collaborative SOC environment.