Information Security Analyst ( Infosec)

Omnissa; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Omnissa is seeking a Senior Information Security Analyst to join the Threat Management team. You will monitor, analyze, and respond to security events from logs, network traffic, and threat feeds; manage the incident response lifecycle; and produce actionable reports for stakeholders.

Responsibilities include administering security tools, collaborating on security architecture, leveraging AI for faster detection, and contributing to playbooks and automation to reduce risk.

Qualifications

• 6 to 12 years of work experience in Security Monitoring and Incident Response.
• Experience with SIEM systems, including configuration, tuning, optimization, and threat detection creation.
• Understanding of cloud security principles, including AWS and Azure security best practices and Microsoft Defender for Azure.
• At least a basic understanding of core AI security principles, methodologies, and risks to an organization from the defender perspective.
• Strong familiarity with endpoint detection and response tools, such as CrowdStrike Falcon.
• Experience with DLP solutions to identify and prevent sensitive data exfiltration.
• Knowledge of IAM principles and Microsoft Identity solutions to ensure secure authentication and authorization.
• Ability to manage the incident response process from initial detection through containment, eradication, recovery, and post-incident activities.
• Experience with SOAR tools to streamline security workflows and automate tasks.
• Any experience with using AI tools and platforms to perform tasks and accelerate and automate workflows.
• Ability to analyze complex data sets and identify potential security threats.
• Excellent verbal and written communication skills to collaborate with stakeholders and provide insightful analysis.
• Commitment to ongoing learning and professional development in the field of cybersecurity.
• Knowledge of relevant compliance frameworks, such as HIPAA, SOC2, ISO, or PCI-DSS, to ensure security controls are aligned with regulatory requirements.
• Capacity to work effectively in a dynamic environment with multiple priorities and deadlines.

Responsibilities

• Monitor, analyze, and respond to security event data from logs, network traffic, and threat intelligence feeds.
• Manage the incident response process from initial detection through containment, eradication, recovery, and post-incident activities.
• Develop and maintain incident reports and provide insights to stakeholders on incident causes, impacts, and lessons learned.
• Administer and optimize security tools, such as SIEM systems, IDS/IPS, and threat intelligence platforms.
• Collaborate with other teams to ensure the effective integration of these tools into the security architecture.
• Leverage AI tools to accelerate alert detection, triage, and data analysis to improve SOC maturity.
• Share knowledge with junior analysts through training, documentation, and guidance.
• Participate in developing security procedures, playbooks, and other SOC documentation.
• Continuously evaluate and improve security processes and automate workflows to reduce risk.

Skills

Security Monitoring

Incident Response

Threat Analysis

Cloud Security

AWS

Azure Security

Endpoint Protection

AI Security

Threat Intelligence

Log Analysis

Tools

SIEM

CrowdStrike Falcon

SOAR

Swimlane Turbine

Microsoft Defender for Azure

Threat Intelligence Platforms

Job description

Задачи

We are Omnissa! The world is evolving fast, and organizations everywhere - from corporations to schools - are under immense pressure to provide flexible, work-from-anywhere solutions. They need IT infrastructure that empowers employees and customers to access applications from any device, on any cloud, all while maintaining top-tier security. That's where Omnissa comes in. The Omnissa Platform is the first AI-driven digital work platform that enables smart, seamless and secure work experiences from anywhere. It uniquely integrates multiple industry-leading solutions including Unified Endpoint Management, Virtual Apps and Desktops, Digital Employee Experience, and Security & Compliance through common data, identity, administration, and automation services. Built on the vision of autonomous workspaces - self configuring, self-healing, and self-securing - Omnissa continuously adapts to the way people work, delivering personalized and engaging employee experiences, while optimizing security, IT operations and costs. we're experiencing rapid growth - and this is just the beginning of our journey! At Omnissa, we're driven by a shared mission to maximize value for our customers. Our five Core Values guide us: Act in Alignment, Build Trust, Foster Inclusiveness, Drive Efficiency, and Maximize Customer Value - all with the aim of achieving shared success for our clients and our team. As a global private company with over 4,000 employees, we're always looking for passionate, talented individuals to join us.

As a Senior Information Security Analyst the Threat Management organization at Omnissa is looking for a Senior Information Security Analyst who is passionate about redefining, reimagining, and contributing towards building a robust and resilient information security posture. Information security is about harnessing the power of security expertise built on a solid foundation of threat analysis, risk management, compliance, and incident response. This role requires flexibility in work hours, including participation in an on-call rotation to ensure 24/7 coverage. Additionally, working outside regular business hours may be necessary to respond to emerging threats or incidents. At Omnissa, we are committed to helping our people grow professionally. Our talented employees exemplify our shared values and continue to drive our company to new heights.

As a Senior Information Security Analyst, you will be a subject matter expert in monitoring, analyzing, and responding to security event data from various sources, including logs, network traffic, and threat intelligence feeds. Manage the incident response process from initial detection through containment, eradication, recovery, and post-incident activities. Develop and maintain incident reports and provide insights to stakeholders on incident causes, impacts, and lessons learned. Administer and optimize security tools, such as SIEM systems, intrusion detection/prevention systems, and threat intelligence platforms. Collaborate with other teams to ensure the effective integration of these tools into the overall security architecture. Make use of AI tools to accelerate alert detection and triage as well as log and data analysis to drive the maturity of the SOC and meet evolving threats. Share knowledge and expertise with junior analysts and other stakeholders through training sessions, documentation, and informal guidance. Participate in the development of security procedures, playbooks, and other documentation to support the SOC team's mission. Continuously evaluate and improve the effectiveness of security processes and tools, identifying opportunities for automation and streamlining workflows to enhance efficiency and reduce risk.

Требования

• You should have a minimum of 6 to 12 years of work experience in Security Monitoring and Incident Response.
• Experience with SIEM systems, including configuration, tuning, optimization, and threat detection creation.
• Understanding of cloud security principles, including AWS and Azure security best practices and Microsoft Defender for Azure.
• At least a basic understanding of core AI security principles, methodologies, and risks to an organization from the defender perspective.
• Strong familiarity with endpoint detection and response tools, such as Crowdstrike Falcon.
• Experience with DLP solutions to identify and prevent sensitive data exfiltration.
• Knowledge of IAM principles and Microsoft Identity solutions to ensure secure authentication and authorization.
• Ability to manage the incident response process from initial detection through containment, eradication, recovery, and post-incident activities.
• Experience with SOAR tools to streamline security workflows and automate tasks.
• (Swimlane Turbine experience is preferred)
• Any experience with using AI tools and platforms to perform tasks and accelerate and automate workflows.
• Ability to analyze complex data sets and identify potential security threats.
• Excellent verbal and written communication skills to collaborate with stakeholders and provide insightful analysis.
• Commitment to ongoing learning and professional development in the field of cybersecurity.
• Knowledge of relevant compliance frameworks, such as HIPAA, SOC2, ISO, or PCI-DSS, to ensure security controls are aligned with regulatory requirements.
• Capacity to work effectively in a dynamic environment with multiple priorities and deadlines.