Senior SIEM Analyst

theserverlab; United States; On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) plan with match

Paid time off

Job summary

A leading security firm in the United States is seeking an experienced security analyst who will perform second level investigations, participate in ongoing administration of security tools, and advise management on evolving threats. Candidates should have over 5 years of relevant experience and a strong technical background in security operations. Competitive benefits included.

Qualifications

• 5+ years of combined Information Security and Technical Administration Experience.
• Experience with security information and event management (SIEM) systems.
• Experience with IDS/IPS and other network security platforms.

Responsibilities

• Perform second level investigation and responds to alerts from Security Operations tooling.
• Participate in ongoing administration of security tools like SIEM and IDS/IPS.
• Advise management on best practices and current trends in threats.

Skills

Information Security experience

Technical Administration

SIEM systems

IDS/IPS

Network Security

Job description

Job Description

• Performs second level investigation and responds to alerts generated by Security Operations tooling such as IDS/IPS, SIEM, Web Proxy technologies
• Perform second level investigation and responds to user reported threats such as phishing and social engineering
• Participates in the ongoing administration of SIEM, IDS/IPS, Web Proxy, NGAV, EDR/XDR tooling
• Participates in Incident Response activities as a support resource through the entire Incident Response life-cycle
• Apply or recommend adaptive security measures based on investigative findings and threat monitoring
• Performs second level triage of vulnerability bulletins and results from Vulnerability Management programs, participating in escalating and recommending remediation activities
• Perform threat hunting based on Tactics, Techniques and Procedures (TTPs) and threat reporting from information sharing organizations (US-CERT, FS-ISAC, etc.)
• Advise management on best practices, current trends, and pertinent changes in internal/external threats and opportunities for improvement. Presents action plans for implementation and approval
• Documents and provides a report of all analyst activity (SOC Analyst Diary) to SOC leadership on a routine basis to allow for adjustment in overall SOC posture and health
• Provide technical expertise to support vendor and project reviews
• Performs all other duties and special projects as assigned

Requirements

• 5+ years of combined Information Security and Technical Administration Experience
• Experience with security information and event management (SIEM) systems
• Experience with IDS/IPS and other network security platforms
• Breadth and depth of technical and or functional expertise in security operations and other related areas within information technology departments such as Infrastructure, Engineering, Networking or Development

Rewards

This role is eligible for a competitive benefits package which includes medical, dental, vision, a 401(k) plan and match, paid time off, an ESPP and much more!