Senior Security Analyst, Detection & Response

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the investigation and response efforts for security alerts, incidents, phishing attempts, malware infections, suspicious activities, and other cybersecurity occurrences within Fullsteam and its Business Units.

• Collaborate with infrastructure, cloud, application, and business unit teams to manage, remediate, and recover from security incidents.

• Engage in a 24x7 on-call rotation and lead during high-severity incident response situations.

• Conduct threat hunting and proactive analysis to detect emerging threats and indicators of compromise.

• Drive initiatives to fine-tune and optimize security alerts, minimize false positives, and enhance detection accuracy across monitoring platforms.

• Create, maintain, and continually enhance incident response procedures, playbooks, and operational workflows.

• Offer guidance to Business Units regarding security risks, control enhancements, and remediation priorities.

• Distribute quarterly phishing awareness campaigns to educate employees on the risks associated with phishing.

• Assist in the implementation, maintenance, and operationalization of security technologies, including EDR and SIEM.

• Examine trends in alerts and incidents to identify systemic security challenges and suggest strategic enhancements.

• Support significant security initiatives, acquisitions, integrations, and various cross-functional cybersecurity projects.

⛳️ Requirements

• A minimum of 4 years of experience in Information Technology or 2 years of experience in incident detection and response.

• Proven experience in solving technical problems.

• A general understanding of computer systems and their operations.

• Familiarity with cloud platforms such as AWS, Azure, and GCP.

• Knowledge of cloud environments and system infrastructure.

• Awareness of common security attack vectors and appropriate response measures.

• Experience in responding to security events and incidents.

• Understanding of standard defensive security controls and their applications.

• Capability to decompose large-scale technical challenges into manageable tasks.

• Relevant certifications like vendor technology certifications, Blue Team, and CompTIA Security+ are advantageous.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Opportunities for professional development and advancement.

• Flexible work environment and schedules.

• Collaborative and inclusive company culture.