Cybersecurity Ops Analyst – Shift Lead

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Oversee the identification, prioritization, and response to intrusion activities and anomalous behaviors on a 24/7/365 Detection & Response Team.

• Evaluate the impact of potentially harmful traffic on networks and infrastructure.

• Investigate security anomalies and incidents through SIEM-based network forensics and EDR-based host forensics.

• Document incidents meticulously and maintain incident tracking tickets.

• Communicate and escalate issues and incidents as required.

• Manage requests for IP, URL, and hash blocking and create correlation content.

• Perform second-level real-time monitoring and analysis of security alerts.

• Assign event analysis responsibilities to Cybersecurity Ops Associates.

• Provide input on tuning processes to enhance anomaly detection.

• Retrieve and analyze data files related to security events.

• Assess malicious activities and review vulnerability information to determine risk levels.

• Work collaboratively with other teams to resolve incidents effectively.

• Supervise shift operations, including training, mentoring, timecard and expense approvals, performance feedback and reviews, and shift coverage.

• Review and enhance documentation procedures.

• Engage in knowledge sharing initiatives.

⛳️ Requirements

• Bachelor's degree with 2+ years of relevant experience, or an Associate's degree in a related field with 3+ years of experience; an additional 4+ years of experience may substitute for a degree.

• At least two years of experience in cybersecurity operations.

• Security+ and CySA+ certifications are mandatory.

• Strong leadership qualities with a proven capability to lead and inspire a team effectively.

• A proactive attitude.

• Self-driven and quick to learn.

• Exceptional verbal and written communication abilities.

• Capacity to manage multiple tasks and collaborate to address complex technical challenges.

• Must be a U.S. Citizen.

• Preferred: 3+ years of experience in cybersecurity operations.

• Preferred: GCIH, CASP+, GSEC, or other relevant certifications.

• Preferred: Experience with SIEM tools, antivirus software, and IDS/IPS technologies.

🏝️ Benefits

• Comprehensive health insurance.

• Retirement savings plans with company matching.

• Opportunities for professional development and certification support.

• Flexible work schedule options.

• Paid time off and holidays.