IT Security Analyst T3 - 100% Remote

The Dignify Solutions, LLC; Herndon (VA); Presencial; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

A cybersecurity solutions provider in Herndon, Virginia is seeking a seasoned cybersecurity professional. The ideal candidate will have over 5 years of general technical cybersecurity experience and at least 3 years of experience in detection engineering and threat hunting. Responsibilities include developing detection logic, analyzing logs, and hunting for threats. This role offers a full-time position in a dynamic IT services environment.

Formación

• 5+ years in general technical cybersecurity experience.
• 3+ years’ experience in detection engineering, threat hunting, or incident response.
• Experience in operationalizing cyber threat intelligence into high-fidelity detection logic.
• Experience developing detection logic and adversarial testing lifecycle
• Proficient at log analysis from endpoints, apps, networks and cloud
• Strong understanding of network, protocol and host cybersecurity fundamentals
• Experience with MITRE ATT&CK and/or D3FEND, SIEM platforms

Responsabilidades

• Develop detection logic and adversarial TTP testing following a detection engineering lifecycle.
• Analyze logs from various sources like endpoints and cloud environments.
• Hunt for threats using investigative tools and user behavior analysis.
• Analyze logs from endpoints, applications, network devices and cloud
• Apply cybersecurity fundamentals to network, protocol and host layers
• Leverage MITRE ATT&CK and D3FEND frameworks in detections
• Proactively hunt threats using investigative tools and user behavior analysis

Conocimientos

Technical cybersecurity experience

Detection engineering

Threat hunting

Incident response

Analyzing logs

Knowledge of MITRE ATT&CK

Knowledge of D3FEND

Experience with SIEM platforms

Investigative tools and techniques

Descripción del empleo

Overview

Get AI-powered advice on this job and more exclusive features.

Responsibilities

• 5+ years in general technical cybersecurity experience.
• 3+ years’ experience in detection engineering, threat hunting, or incident response.
• Experience in operationalizing cyber threat intelligence into high-fidelity detection logic.
• Experience in systematically developing detection logic and adversarial TTP testing against said logic following formalized detection engineering lifecycle.
• Highly proficient in analyzing logs from various sources, such as endpoints, applications, network appliances, and cloud environments.
• Strong technical understanding of cybersecurity fundamentals at the network, protocol, and host levels.
• Experience with MITRE ATT&CK and/or D3FEND frameworks.
• Strong experience with SIEM platforms.
• Ability to proactively and systematically hunt for threats using investigative tools, techniques, and user behavior analysis.

Qualifications

• 5+ years in general technical cybersecurity experience
• 3+ years’ experience in detection engineering, threat hunting, or incident response
• Experience in operationalizing cyber threat intelligence into high-fidelity detection logic
• Experience in systematically developing detection logic and adversarial TTP testing against said logic following formalized detection engineering lifecycle
• Highly proficient in analyzing logs from various sources, such as endpoints, applications, network appliances, and cloud environments
• Strong technical understanding of cybersecurity fundamentals at the network, protocol, and host levels
• Experience with MITRE ATT&CK and/or D3FEND frameworks
• Strong experience with SIEM platforms
• Ability to proactively and systematically hunt for threats using investigative tools, techniques, and user behavior analysis

Employment type

• Full-time

Industries

• IT Services and IT Consulting