Senior Analyst – 3rd Shift

This is a fully remote position, open to applicants in Kansas.

📋 Description

• Conduct in-depth analyses for client investigations utilizing customer-supplied data sources, along with audit and monitoring tools.

• Document and report on potential security incidents, including event timelines.

• Collaborate with partners to comprehend security threats, vulnerabilities, and exploits impacting systems, networks, and assets.

• Evaluate security enforcement technologies such as SIEM, antivirus solutions, content filtering/reporting, malware prevention, firewalls, IDS, WAFs, messaging security platforms, and vulnerability scanners.

• Share knowledge, document findings, and provide training to clients on threat mitigation techniques.

• Advise peers and clients on tuning and best practices.

• Investigate current threats and attack vectors that are actively being exploited.

• Work alongside analysts on escalations and investigations.

• Review client security posture and suggest enhancements to comprehensive security strategies.

• Conduct client gap analyses.

• Develop and maintain standard operating procedures (SOPs) for threat analysts.

• Create and update playbooks and runbooks.

• Collaborate with internal teams to enhance the efficiency and effectiveness of security analysis.

• Train new analysts on security practices and tools.

• Establish and maintain a Content Catalog focused on security essentials and the evolving threat landscape.

• Execute quality assurance reviews of security alerts managed by team members.

⛳️ Requirements

• Associate's degree or equivalent experience in a Security Operations Center (SOC), Managed Security Service (MSS), or enterprise network environment as a point of escalation.

• 2-4 years of professional experience in the Information Security field, with a minimum of 3 years typically required.

• Strong time management, reporting, and communication skills, encompassing customer interactions and executive presentations.

• Data analysis experience using SIEM, database tools, and Excel.

• Proficiency in troubleshooting security devices and SIEM systems.

• Ability to create and manage content within SIEM environments and provide recommendations to clients to enhance visibility.

• Experience in IDS monitoring/analysis with tools such as Sourcefire and Snort.

• Familiarity with SIEM platforms is preferred, including QRadar, LogRhythm, McAfee/Nitro, ArcSight, or Splunk.

• Knowledge of direct and indirect attack vectors, such as SQL injection and cross-site scripting.

• Experience with web-based attacks, OWASP Top 10, network-based DoS, brute force, HTTP-based DoS, denial of service, and network/system-based attacks.

• Understanding of SANS Top 20 Critical Security Controls.

• Knowledge of enterprise Windows security, including Active Directory, Windows security architecture and terminology, privilege escalation techniques, mitigation controls, and system hardening.

• Familiarity with anti-virus and host-based intrusion prevention systems.

• Experience monitoring at least one commercial antivirus solution such as McAfee/Intel, Symantec, Sophos, or Trend Micro.

• Familiarity with XSOAR, Anvilogic, Azure/Entra ID, CrowdStrike Falcon, Recorded Future, Proofpoint TAP/TRAP, Egress, Microsoft Defender Explorer, and ServiceNow is preferred/helpful.

• PowerShell and KQL skills are advantageous.

• Capability to identify common false positives and recommend tuning adjustments.

• Understanding of malware root causes and proactive mitigation strategies.

• Knowledge of malware propagation within enterprise environments.

• Familiarity with web-based exploit kits and their methodologies.

• Awareness of Advanced Persistent Threats and targeted malware.

• Experience and comprehension of malware protection tools like FireEye in an enterprise context.

• Insight into covert channels, egress, and data exfiltration techniques.

• Familiarity with vulnerability scoring systems such as CVSS.

• Basic understanding of vulnerability assessment tools and exploitation frameworks.

• Flexibility to work shifts, including rotating between days, mids, and nights.

🏝️ Benefits

• A company dedicated to our inclusive values through Employee Resource Groups.

• Work/life balance.

• Access to professional training resources.

• Opportunities for creative problem-solving and tackling unique, complex projects.

• Volunteer opportunities through “Optiv Chips In.”

• The necessary technology and ability to work productively from home (where applicable).