Security Operations & GRC Analyst

Cisive Inc.; Maryland; Presencial; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

Cisive Inc. is seeking a Security Operations professional in Maryland to monitor SIEM, manage vulnerability lifecycle, and support endpoint and network security.

You will conduct threat hunting, incident response, and collaborate with IT and engineering to embed security best practices. Required 3–5 years in information security, hands-on SIEM (Splunk, Sentinel), vulnerability tools (Nessus/Qualys), and knowledge of SOC 2/NIST CSF.

Formación

• 3–5 years of information security experience with operational and compliance exposure.
• Hands-on with SIEM platforms (Splunk or Microsoft Sentinel).
• Experience with vulnerability management tools (Nessus/IO or Qualys).
• Knowledge of SOC 2 Trust Services Criteria and NIST CSF.
• Familiarity with MITRE ATT&CK and common attack techniques.
• Strong written and verbal communication; able to translate findings for non-technical audiences.

Responsabilidades

• Monitor, tune, and triage alerts across the SIEM platform.
• Manage vulnerability lifecycle: scanning, remediation tracking, reporting.
• Support endpoint, email, and network security tooling; suggest config improvements.
• Conduct threat hunting and develop detection rules and playbooks.
• Participate in incident response activities including containment and post-incident reviews.

Conocimientos

Analytical thinking

Strong communication

Team collaboration

Herramientas

Splunk

Microsoft Sentinel

Tenable Nessus/IO

Qualys

Archer

ServiceNow GRC

Drata

Vanta

Descripción del empleo

Cisive Inc. is seeking a Security Operations professional in Maryland to monitor SIEM, manage vulnerability lifecycle, and support endpoint and network security.

You will conduct threat hunting, incident response, and collaborate with IT and engineering to embed security best practices. Required 3–5 years in information security, hands-on SIEM (Splunk, Sentinel), vulnerability tools (Nessus/Qualys), and knowledge of SOC 2/NIST CSF.