Analyst, Cybersecurity DFIR

Responsibilities

• Email Triage - Evaluating staff reported emails for malicious intent
• Data Loss Prevention - Reviewing Daily DLP events for evidence of internal information leaving the network
• Operations - Handling end user support requests. Some examples of end-user requests: unblocking websites, permitting file uploads, modifying anti-virus policies, and testing email attachments.
• Incident Management – Detect, document, investigate, and resolve security incidents in an efficient manner
• Intrusion Detection - Develop and tune anomaly detection capability to produce reliable actionable data
• Behavioral Analysis - Develop and implement criteria to identify anomalous user behavior leading indicating insider threat activity

Desirable Knowledge and Experience

• University degree in Engineering, CIS, or related discipline
• Hands-on experience with Systems Administration
• Deep understanding of networking and its application
• Relevant Information Security experience

Core Competencies

• Problem solving: We focus on identifying and solving our customers’ needs and make well-informed, quick decisions
• Communication: We communicate clearly, constructively, and frequently
• Integrity & Professionalism: We hold ourselves and each other to the highest standards
• Collaboration: We work as one team focused on a common set of objectives and committed to each other’s' success
• Leadership: We lead by example

Advancement Opportunity
Seniority is determined by experience and demonstration of exceptional competencies including:

• Automation - Automating simple tasks using python increasing efficiency and continuity
• Counter Measures - Ability to design and implement preventative and corrective controls to counteract emerging threats
• Security Analytics - Efficiently distill actionable information from large data sets for reporting, hunting, and anomaly detection
• Proactive Threat Hunting - Develop and execute focused plans to discover advanced threats that evade traditional security controls
• Serve as a responsible Subject Matter Expert (SME) on one or more tools or technologies via learning, testing, implementing, enhancing, and educating.