Security Analyst, 2nd Shift

This is a fully remote position, open to applicants in Vermont.

📋 Description

• Oversee client environments and assess security alerts.

• Evaluate security alerts, events, and patterns.

• Execute alert classification, handling, and escalation within SLA guidelines.

• Conduct independent investigations into complex and high-severity issues.

• Implement containment and response measures, which include host isolation, process termination, and blocking indicators.

• Record tickets featuring evidence trails, investigative logic, and rationale for dispositions.

• Utilize SIEM, MDR, mXDR, and incident response tools in accordance with established engagement rules.

• Identify security vulnerabilities, mitigation strategies, risks, and opportunities for process enhancement.

• Relay findings and suggestions to internal teams and clients.

• Engage in scheduled security operations meetings with clients.

• Produce reports and enhance documentation.

• Highlight excessive, low-fidelity, or malfunctioning detections for assessment.

• Document and share information for shift transitions and hand-offs.

• Remain updated on threats, exploits, and vulnerabilities.

⛳️ Requirements

• Bachelor’s Degree in a relevant field, or alternatively, two (2) years of experience in a related technological field along with pertinent industry certifications.

• At least two (2) years of experience with Splunk Enterprise Security, CrowdStrike Falcon, and/or Microsoft Sentinel.

• Capability to articulate basic hardening techniques for network and process detections.

• Knowledge of common best practices for endpoint security.

• Proven understanding of incident response principles and procedures.

• Advanced grasp of security technologies aimed at mitigating cyber risks, with the ability to effectively communicate that expertise.

• Familiarity with standard network services and potential attacks against them.

• Prior experience in technical support or a security-centric position.

• Experience with relevant industry certifications such as Security+, Network+, or CYSA+ is an advantage.

• Practical experience with containment or response actions within an EDR/XDR platform, like CrowdStrike Falcon or Microsoft Defender, is a plus.

• Knowledge of detection tuning concepts is advantageous.

• Strong writing skills for documenting technical findings are a plus.

🏝️ Benefits

• Competitive salary.

• Opportunities for performance-based bonuses; an annual bonus program with a target of 10%.

• Generous paid time off.

• Comprehensive benefits package.

• A collaborative and high-performing team environment.

• Leaders committed to your success and professional growth.

• Meaningful work that aids organizations in safeguarding critical services and missions.

• Support for bringing your authentic self to work each day.