Senior Security Analyst

Title: Senior Security Analyst Location: Remote Compensation: 130 to 160k plus 10% bonusType: Direct Hire

We are seeking driven, passionate, and enthusiastic team members to join our team of information security professionals. The Senior Security Analyst will be the Subject Matter Expert (SME) on the investigation process, providing guidance to the Security Analyst team. The ideal candidate will be well versed in security event analysis through industry best practice toolsets, have a deep knowledge of current emerging threats, security content development, and be able to develop risk mitigation strategies required to protect the confidentially, integrity, and availability of information systems and data. Candidates should be proficient at working with internal business units and clients to resolve issues and develop effective action plans.

Responsibilities:Serves as the SME on the security event analysis process and procedures.Performs advanced threat hunting exercises to identify unknown threats within a client environment.Performs regular audits to gauge and improve performance including quality reviews (QA/QC) of current analysts based on Key Performance Indicators (KPIs) and provides feedback on improvement points to analysts.Works as the primary communications channel between the analyst team and other SOC departments, establishing/driving projects based on these communications.Works closely with Delivery Managers on client reporting, presentations, and meetingsParticipates in monthly status calls with clients to present key metrics and analyst findings.Coordinates the implementation and execution of Long-Term Projects that align with managerial expectations as well as SOC wide goals under the guidance of SOC leadership.Routinely evaluates Analyst team pain points via independent assessments or communication with analysts to drive independent and creative solutions to address these pain points.Designates and drives Short Term Projects based on these evaluations.Lead incident investigations during client incident response scenarios.Participate in the team’s on-call rotation to serve as an escalation point for after business hours.

Required Skills:Tier III analyst experience involving host analytics (EDR, Windows event logs, etc.), network-based evidence, and incident investigations.Ability to conduct multi-source threat analysis utilizing SIEM event data.Expert knowledge and experience using SIEM, EDR, vulnerability management, network traffic analysis and other industry standard security technologies for event investigation.Advanced understanding of security relevant log ingestion required to achieve security use cases.Strong understanding of IPv4, TCP/IP, low level networking and protocols, TCP/UDP ports and how they relate to security risk landscape.Understanding of cloud technologies as it relates to security (AWS, Azure, GCP)Basic awareness of audit requirements (PCI, HIPAA, SOC, etc.)

Qualifications:Minimum of 7 years of technical experience in Information Security or Network Engineering with at least 3-5 years of experience in a Security Operations CenterStrong written, verbal, and non-verbal communication skills, especially conveying complex information in an understandable manner.Must be available on a rotational basis to be the designated on-call Senior Analyst during off hours in case of a SOC emergency or inquiry.Ability to work extremely well under pressure while maintaining a professional image and approach.Able to effectively and independently identify and drive change to improve the Security Analyst team.Able to demonstrate integrity, leadership, teamwork, and results.

EEOC: We are committed to equal employment opportunity without consideration of race, color, religion, ethnicity, citizenship, political activity or affiliation, marital status, age, national origin, ancestry, disability, veteran status, sexual orientation, gender identity, gender expression, sex or gender, or any other basis protected by law.