Information Security Analyst

Jobtailor; Atlanta (GA); On-site; USD 85,000 - 120,000; Full time

Job summary

Jobtailor is seeking a Security Monitoring and Incident Response specialist in Atlanta to monitor, analyze, and respond to security event data from host logs and network traffic. You will respond to critical alerts and drive incident response from detection through containment and recovery.

This role emphasizes developing detections, playbooks, and SOPs for emerging threats, while improving processes, tooling, and automation. Strong communication and collaboration with stakeholders are required.

Qualifications

• Minimum of 2 years in Security Monitoring and Incident Response.
• Experience with SIEM systems including configuration, tuning, optimization, and threat detection creation.
• Understanding of cloud security principles; Azure security and Defender for Azure.
• Familiarity with EDR tools such as CrowdStrike Falcon.
• Experience with DLP solutions (Trellix DLP).
• Knowledge of IAM principles and Microsoft Identity solutions.
• Experience with SOAR tools; Tines experience preferred.
• Proficiency in scripting languages such as Python or PowerShell.
• Ability to analyze complex data sets and identify potential threats.
• Experience using AI capabilities to improve investigation and response workflows.
• Excellent verbal and written communication skills.
• Commitment to ongoing learning and professional development in cybersecurity.
• Knowledge of compliance frameworks such as HIPAA, SOC2, ISO, or PCI-DSS.

Responsibilities

• Monitor, analyze, and respond to security event data from host logs, network traffic, and threat intelligence feeds.
• Respond to critical security alerts.
• Perform incident response from initial detection through containment, eradication, recovery, and post-incident activities.
• Develop new Threat Detections, Playbooks, and SOPs for emerging threats and trends.
• Evaluate and improve security processes, alerting, and tools.
• Identify opportunities for tuning, automation, and workflow streamlining to enhance efficiency and reduce risk.
• Collaborate with stakeholders and provide insightful security analysis.

Skills

Python

PowerShell

Data analysis

Communication

Incident response coordination

Automation

Education

Bachelor's degree or equivalent

Tools

SIEM systems

CrowdStrike Falcon

Trellix DLP

SOAR tools (Tines)

Microsoft Defender for Azure

Job description

• Monitor, analyze, and respond to security event data from host logs, network traffic, and threat intelligence feeds
• Respond to critical security alerts
• Perform incident response from initial detection through containment, eradication, recovery, and post-incident activities
• Develop new Threat Detections, Playbooks, and SOPs for emerging threats and trends
• Evaluate and improve security processes, alerting, and tools
• Identify opportunities for tuning, automation, and workflow streamlining to enhance efficiency and reduce risk
• Collaborate with stakeholders and provide insightful security analysis

Requirements

• Minimum of 2 years of work experience in Security Monitoring and Incident Response
• Experience with SIEM systems, including configuration, tuning, optimization, and threat detection creation
• Understanding of cloud security principles, including Azure security best practices and Microsoft Defender for Azure
• Familiarity with endpoint detection and response tools such as Crowdstrike Falcon
• Experience with DLP solutions, including Trellix DLP
• Knowledge of IAM principles and Microsoft Identity solutions
• Experience with SOAR tools; Tines experience preferred
• Proficiency in scripting languages such as Python or PowerShell
• Ability to analyze complex data sets and identify potential security threats
• Experience using and leveraging AI capabilities to improve investigation and response workflows
• Excellent verbal and written communication skills
• Commitment to ongoing learning and professional development in cybersecurity
• Knowledge of compliance frameworks such as HIPAA, SOC2, ISO, or PCI-DSS
• Capacity to work effectively in a dynamic environment with multiple priorities and deadlines
• Bachelor’s degree preferred, or equivalent combination of education and relevant professional experience

Core Competencies

Demonstrates expertise in Security Monitoring and Incident Response, with a strong focus on threat detection, incident management, and process improvement. Proficient in leveraging SIEM systems, cloud security principles, and automation tools to enhance security operations.