Cyber Security Analyst

This is a fully remote position, open to applicants in Florida, +3 more states.

📋 Description

• Oversee and assess alerts generated from SIEM/SOAR systems and user submissions

• Examine security incidents and implement containment and eradication strategies

• Enhance detection rules and SOC procedures to minimize false positives and elevate detection precision

• Investigate emerging threats and attack methodologies while creating new detection rules

• Actively search for concealed threats through log analysis and identifying security vulnerabilities

• Review threat intelligence sources, channels, and articles to assess potential risks

• Design, implement, and sustain automation solutions for SOC workflows

• Compile and deliver reports on SOC operations, metrics, and security trends

• Engage in Red and Purple Team penetration testing activities

• Collaborate with SOC team members, stakeholders, and management

⛳️ Requirements

• Practical experience with SIEM platforms

• Familiarity with EDR solutions including CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, and Cortex XDR

• Understanding of common log sources such as firewalls, Azure AD, Windows Security Log, email, and proxy/URL filtering

• Knowledge of phishing, brute-force attacks, malware, and data exfiltration methods

• Proactive attitude, accountability, and urgency in addressing security incidents and tasks

• Strong motivation and willingness to continuously learn and adapt to changing threat environments

• Minimum of 1–2 years of experience in a SOC setting, either in-house or with an MSSP

• Bachelor’s degree in Computer Security, Cybersecurity, Information Security, or a related field is preferred

• Additional relevant experience may be accepted in place of a degree

• Preferred: advanced development of SIEM content, including custom correlation rules, dashboards, and reporting

• Preferred: scripting skills in Python, PowerShell, or Bash

• Preferred: comprehensive incident response experience, including root cause analysis and post-incident reporting

• Preferred: experience in monitoring and securing cloud environments such as Microsoft Azure, AWS, or Google Cloud Platform

• Strong analytical and problem-solving abilities

• Excellent troubleshooting and log analysis skills

• Capability to translate security requirements into technical solutions

• Ability to work both independently and as part of a team in a fast-paced SOC environment

• Outstanding verbal and written communication skills

• High situational awareness and sensitivity to problems

• Ability to manage multiple priorities in a dynamic, fast-paced environment

• Willingness to travel up to 5 days per year

🏝️ Benefits

• Competitive base salary and bonus opportunities

• Paid time off (minimum three weeks)

• Medical, dental, and vision coverage starting on the first day

• 401(k) plan with employer matching

• Paid parental leave

• Child and family care assistance (dependent care FSA with employer match up to $2500)

• Bundle of joy benefit (a year's supply of free diapers for all team members welcoming a new baby)

• Tuition assistance

• Wellness program offering savings of up to $4,000 per year on insurance premiums