Cyber Operations Analyst
Core
Provide ongoing support for the Cybersecurity Operations Center (CSOC) focusing on incident response, investigation, and initial analysis/resolution of security alerts from SIEM and monitoring solutions.
Role type
Cyber Operations Analyst (Incident Response)
Builds
Security monitoring and incident response capabilities for the CSOC
Domain
Cybersecurity / Threat Detection
Required skills
SIEM and log-management architecture knowledge, network and system/application architecture principles, threat-actor tools and techniques understanding, incident response coordination, vulnerability management awareness, automation runbook development
Preferred skills
AWS and cloud security technologies, digital forensic investigations (endpoint, host-based, network, cloud), Python and/or Bash coding, network security technologies
Technologies
SIEM, log-management tools, AWS, Python, Bash
Responsibilities
Monitor security tools and provide remediation response, escalate security events, coordinate information gathering for IT teams, interact with MDR analysts for triage, work with engineering on log source and tool issues, implement changes to log sources and alerts, support vulnerability management, participate in Incident Response activities
Seniority
Mid-level, hands-on IC
