vacancy remote job Cyber Security SOC Analyst Job ID- 3200

MaziCTools; United States; Remote; USD 85,000 - 115,000; Full time

Job summary

MaziCTools is seeking a Cybersecurity Analyst to protect our systems from intrusions, malware, and threat actors. You will support automation and data integration to optimize security analysis.

Responsibilities include incident response, threat monitoring, cloud detection, and collaboration with threat intel teams to identify and mitigate risks across on-prem and cloud environments.

Qualifications

• Bachelor's degree preferred in CS/Engineering/IS
• 5+ years in information security, esp. network security
• CISSP/CISA/CISM desired, not required
• Proficient in analyzing threat data and attacker TTPs

Responsibilities

• Researches emerging threats and vulnerabilities to aid in identifying incidents and update policies
• Provides incident response support, including containment and forensics analysis
• Supports business continuity/disaster recovery planning and tests
• Performs network monitoring and intrusion detection using IDS/IPS, firewalls, HBSS
• Reviews alerts and documents formal incident reports
• Tests new hardware and software for security before deployment
• Performs log-based and endpoint threat detection across sources
• Deploys cloud-centric detection for cloud environments and services
• Correlates activity across assets and environments to identify anomalies
• Collaborates with threat intelligence and threat-hunting teams
• Researches emerging threats and vulnerabilities to aid in incident identification

Skills

Threat detection

Incident response

Network security

Cloud security

Log analysis

Threat hunting

Education

Bachelor's degree in CS/Engineering/Info Systems

CISSP

CISA

CISM

Tools

IDS/IPS

HBSS

Firewall

SIEM

Forensics tools

Job description

SummaryAs a member of the Information Security team, the Cybersecurity Analyst is responsible for protecting the company from intrusions, malware, threat actors, and other forms of cyber attacks. The cybersecurity analyst will be involved in supporting efforts to automate, integrate, and aggregate the data and systems needed to optimize and accelerate analysis.

Essential Duties and Responsibilities include the following. Other duties and tasks may be assigned.

• Researches emerging threats and vulnerabilities to aid in the identification of network incidents, and supports the creation of new architecture, policies, standards, and guidance to address them
• Provides incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary
• Supports the creation of business continuity/disaster recovery plans, to include conducting disaster recovery tests, publishing test results, and making changes necessary to address deficiencies
• Conducts network monitoring and intrusion detection analysis using various computer network defense (CND) tools, such as intrusion detection/prevention systems (IDS/IPS), firewalls, host-based security system (HBSS), etc.
• Reviews alerts and data from sensors and documents formal, technical incident reports
• Tests new computers, software, switch hardware and routers before implementation to ensure security
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources
• Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization
• Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity
• Reviews alerts and data from sensors, and documents formal, technical incident reports
• Works with threat intelligence and/or threat-hunting teams
• Researches emerging threats and vulnerabilities to aid in the identification of incidents

Qualifications/Requirements

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily.

Requirements include

• Bachelor's degree preferred; degree in computer science, engineering, information systems or another related discipline strongly preferred.
• Five plus (5+) years of work experience in information security, especially in a network security analyst role.
• Desired, but not required: Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM)
• Technical expertise in analyzing threat event data, evaluating malicious activity, documenting unusual files and data, and identifying tactics, techniques and procedures used by attackers

Familiarity with business needs and commitment to delivering high-quality, prompt and efficient service to the business

Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one

An understanding of organizational mission, values, and goals and consistent application of this knowledge

Strong problem-solving and trouble-shooting skills

Self-motivated and possessing of a high sense of urgency and personal integrity

vacancy remote job Cyber Security SOC Analyst Job ID- 3200