Cybersecurity Ops Associate, 3rd Shift

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Oversee and evaluate security events for the continuous 24/7/365 Enterprise Security Operations Center Detection & Response team

• Manage SIEM and review firewall logs, system logs, intrusion detection systems, applications, databases, cloud infrastructure, and other security information sources

• Address and escalate security events and potential intrusion or security breach alerts

• Gather historical incident data for trend analysis and enhancements to security measures

• Support incident containment to avert unauthorized access or data loss

• Investigate and either approve or deny IP/URL block requests

• Create signature patterns and offer feedback on signature tuning

• Generate and maintain incident tickets

• Conduct PCAP analysis and event correlation

• Assess urgency and potential impact of incidents

• Analyze malicious-actor behavior, infection vectors, timelines, and data loss

• Develop and sustain SOPs, incident reports, policies, and other security documentation

• Communicate and escalate issues and alerts as necessary

⛳️ Requirements

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline; an additional 4+ years of relevant experience may be accepted in place of a degree

• Must hold CompTIA Security+ certification

• Must be a U.S. Citizen

• Willingness to work flexible hours in a 24x7x365 environment

• Proficient understanding of security architectures and devices

• Familiarity with operating systems, network security, protocols, application security, infrastructure hardening, and security baselines

• Strong verbal and written communication skills

• Capability to multitask

🏝️ Benefits

• 100% remote work available for the right candidate

• Flexible hours in a 24x7x365 environment

• Third-shift schedule: 10:00 p.m. to 8:00 a.m., Sunday-Wednesday