Solution/Product Analyst (Cybersecurity)
Core
Investigate and respond to complex security incidents and alerts using SIEM tools and endpoint data to identify threats and vulnerabilities.
Role type
Tier 2 Security Incident Response Analyst
Builds
Incident response plans and corrective/preventative action plans
Domain
Cybersecurity / Information Security
Required skills
Incident response, SIEM analysis, threat identification, vulnerability assessment, change request validation, phishing investigation, third-party vendor management, security tool operation
Preferred skills
SOC operations, Microsoft 365 Defender, Azure Sentinel, MCAS, Agile methodologies, ISC2 SSCP/CCSP, Microsoft Azure-500/SC-200, CompTIA CySA+
Technologies
MS 365 Defender, MCAS, Azure Sentinel, SIEM, endpoint event logs, enterprise applications
Responsibilities
Investigate SOC and security incidents, analyze data from varied sources, identify indicators of compromise, propose security improvements, validate change requests, investigate phishing/SPAM, monitor security tools, ensure third-party delivery performance
Seniority
Mid-level, hands-on IC
