Senior Information Security Operations Center Analyst

This is a fully remote position, open to applicants in Florida.

📋 Description

• Develop and execute security protocols to safeguard computer systems, networks, and data.

• Manage advanced security investigations and incidents.

• Oversee network traffic for security-related activities and conduct triage assessments.

• Analyze incidents in detail, correlating results with threat intelligence to pinpoint threat actors, the nature of attacks, and impacted systems or data.

• Establish and implement strategies for containment, remediation, and recovery.

• Provide cyber intelligence services and actionable threat insights to IT, business leaders, and management.

• Recognize emerging threat tactics, techniques, and procedures utilized by cyber adversaries.

• Engage in threat hunting initiatives.

• Develop and update use cases for recurring investigations and incident triggers that support 24/7 Cyber Threat Operations and Cyber Threat Management.

• Formulate and maintain incident-response playbooks.

• Manage escalated cyber threats and incidents for Tier 1 analysts.

• Support escalated cybersecurity incidents and cyber investigations, including computer forensics, network forensics, root cause analysis, and malware analysis.

• Collaborate with Information Security teams, risk officers, and technology management to shape cybersecurity strategies.

• Improve security monitoring tools with contextual insights.

• Guide junior analysts through mentorship.

• Comply with policies, standards, regulatory requirements, reporting, and escalation protocols.

• Perform additional tasks as assigned.

⛳️ Requirements

• A Bachelor’s degree in Information Assurance, Computer Science, Engineering, or a related technical discipline is required.

• A minimum of three (3) years of experience in information security administration, offensive tactics, monitoring, and incident response is required.

• At least three (3) years of relevant security systems administration experience with endpoint, network, application, and host-based security solutions is required.

• Preferably two (2) years of experience in cloud computing security configuration and management with AWS, Google Cloud Platform, or Microsoft Azure.

• Ability to lead and influence individuals and small teams regarding ideas, concepts, and opportunities.

• Strong critical thinking and problem-solving abilities.

• Proficient in basic computer applications, including Microsoft Office software products.

• Capability to communicate business risk as it pertains to information security.

• Expertise in incident response along with system monitoring and analysis.

• Advanced understanding of incident-handling procedures and intrusion-analysis models.

• Foundational knowledge of processes, procedures, and methods for researching, analyzing, and disseminating threat intelligence information.

• Advanced knowledge of cybersecurity operations in at least two areas, such as SOC operations, IDS/IPS, SIEM, APT and insider threats, vulnerabilities and exploits, incident response, investigations, and remediation.

• Broad general IT knowledge in at least two areas, including operating systems, networking, computer programming, web development, or database administration.

• Possession of an Information Risk, Privacy, or Security certification, such as CISSP, CCSK, CCSP, or PCSM.

• Travel requirement of 1–10%.

• DOT Regulated: No.

🏝️ Benefits

• Eligibility for annual bonuses, commissions, and/or long-term incentive plans may apply.

• Options for medical, prescription, dental, and vision insurance.

• Life insurance and disability insurance options available.

• Paid time off for vacation, illness, bereavement, family, and parental leave.

• Tax-advantaged 401(k) retirement savings plan.