Security Analyst

NuHarbor Security; United States; Teletrabalho; USD 94 000 - 133 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Paid time off

Bonus plan (10% target)

Competitive benefits

Resumo da oferta

NuHarbor Security is seeking a Security Analyst to join our Managed Security Services team. You will monitor client environments for security incidents, triage events and escalate as needed, and provide actionable guidance to strengthen defenses.

The role requires strong SIEM/EDR experience, threat hunting, and the ability to communicate complex findings to clients and technical staff. Eastern Time shifts offered.

Qualificações

• Bachelor’s degree or equivalent experience in cybersecurity.
• Two years in cybersecurity field with relevant certifications.
• Experience with SOC operations and security event triaging.
• Strong incident response knowledge.
• Experience with SIEM/EDR toolsets.

Responsabilidades

• Analyze security alerts, events, and trends to communicate value of NuHarbor services.
• Independently conduct investigations to provide actionable escalations.
• Provide vulnerability scan interpretation and client guidance.
• Ensure timely client-facing and internal escalations.
• Perform threat hunting in client environments.
• Maintain threat intelligence platform.

Conhecimentos

SOC operations

Incident response

Threat hunting

SIEM

EDR

SOAR

Splunk ES

CrowdStrike Falcon

Microsoft Defender

Scripting (automation)

Formação académica

Bachelor's Degree in cybersecurity or related field

Two years related technology experience in lieu of degree

Ferramentas

Splunk Enterprise Security

CrowdStrike Falcon

Microsoft Defender/Defender

SOAR platform

Descrição da oferta de emprego

The Company

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We're growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.

The Role

The Security Analyst role, as part of our Managed Security Services team, are responsible for ensuring that client environments are monitored for security incidents and escalating notable events to clients and/or internal crew members.

Opportunities are available on 1st, 2nd and 3rd shifts (Eastern Time Zone).

What you'll do

Live by the NuHarbor Corporate Values: Help Clients Win, Always Improve, Protect the House.

Responsible and accountable for analyzing security alerts, events, and trends in order to effectively communicate the value of NuHarbor services.

Independently and autonomously conducts investigations to provide actionable, context relevant, escalations to clients.

Provide analysis and interpretation of vulnerability scans and assessments.

Ensure client facing and internal escalations are serviced in a timely fashion.

Leverage their understanding of client environments to identify and communicate security gaps and potential mitigations.

Identify and scope opportunities for improvements in efficiency, quality, maturity, and capabilities.

Maintain current certifications and training relevant to their role as defined in the NuHarbor Career Course Toolkit.

Develop, implement, and improve documentation and operational processes.

Use an advanced understanding of, and ability to communicate, security technologies to mitigate cyber risks.

Be responsible for ensuring reports are generated to standard and on-schedule.

Maintain the NuHarbor Security threat intelligence platform.

Perform threat hunting in client environments.

Proactively identifies and communicates internal and client risks.

Perform intelligence gathering and analysis to influence technical control development, client security program maturity, and client attack surface defense.

Continually researches the cyber industry to stay up to date on current threats, threat actor's tactics and techniques, and emerging vulnerabilities.

Your foundation. The requirements for this role:

• Bachelor's Degree and two (2) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
• In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• Demonstrated experience with SOC operations, executing security event triaging and tuning.
• Strong understanding of Incident Response phases and demonstrated experience responding to security incidents.
• Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset.
• Two (2) years' experience with Splunk Enterprise Security, CrowdStrike Falcon, and Microsoft Sentinel or Defender.
• Demonstrated experience with Endpoint Detection and Response (EDR) or Security Orchestration Automation and Response solutions.
• Demonstrated experience with scripting in industry standard languages in a manner that supports automation solutions.
• Must be a citizen of the United States.

Additional capabilities that will differentiate you for this role:

• Bachelor's Degree and Five (5) or more years in the Information Technology field.
• Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.)
• Holds at least one of the following CrowdStrike certifications: CCFR, CCFA, CCFH
• Demonstrated experience writing runbooks and support procedures.
• Excellent written and verbal communication, and collaboration skills.
• Experience executing initial triaging and response through a SOAR platform.
• Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems.
• Experience with memory and storage forensics.
• Experience with static and dynamic malware analysis.
• Experience providing recommendations to harden existing security controls.
• Experience identifying gaps within security control architecture.
• General systems administrator experience.
• Experience working in multiple cybersecurity disciplines (i.e. RedSec, Threat, Information Assurance, Engineering, etc.)

Base Salary for Security Analyst is targeted at $94,000 - $115,000 annually. Base Salary for Senior Security Analyst is targeted at $109,000 - $133,000 annually.

*Salary based on Burlington, VT salary data. Offer is based on candidate geography. Additionally, this role is eligible for the company bonus plan at a 10% target.

The Rewards

What you can expect:

• The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market.
• An organization that recognizes and rewards employee commitment and contribution to our customers' satisfaction and success
• Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption.
• A collaborative and driven working environment in a rapidly growing company and market
• A fun and social working environment where you are encouraged to be your true self.

You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO.

We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you'd like to be a part of, we'd like to hear from you.

AAP/EEO Statement

The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled.

NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.