Senior Cyber Security Analyst – Incident Response & SOC

• Leading investigations and serving as a subject matter expert while correlating data across multiple log sources and systems
• Continually improving cyber security procedures and documentation to enhance the security posture of the organization
• Communicating with users, vendors, and other IT personnel on security-related issues, providing expert guidance and support
• Staying up to date on evolving cyber threats, identifying their impact, and detecting them in our environment
• Managing infrastructure security systems such as HIDS/NIDS, SIEM, NGAV, EDR, UBA, WAF, DLP, and vulnerability management tools to meet regulatory requirements
• Collaborating with business groups to establish and maintain strong working relationships

• Email security fundamentals (SPF, DKIM, DMARC)
• Phishing and malware investigations
• DFIR / forensic investigation skills
• Deep incident response experience
• Threat analysis across multiple log sources
• Hands-on tooling knowledge (EDR, SIEM, malware analysis, endpoint/network forensics)
• Strong troubleshooting and scenario-based thinking
• Strong written and verbal communication skills
• Working knowledge of Data Loss Prevention concepts/products, Data Encryption concepts, and endpoint management
• Technical knowledge of common network protocols and design patterns including TCP/IP, HTTPS, FTP, SFTP, SSH, RDP, CIFS/SMB, NFS
• Familiarity with various cloud environments (AWS, Azure, O365)
• Understanding of MITRE ATT&CK and NIST Cyber Security Frameworks standards and requirements
• In-depth understanding of Windows operating systems and general knowledge of Unix, Linux, and Mac operating systems
• Functional and practical experience with at least one development or scripting language/framework (e.g., PowerShell, Python, .Net) and regular expressions
• Bachelor's Degree in Information Security, Computer Science, or equivalent combination of education, training, and experience
• Fluent in writing, reading, and speaking English

Hold or willingness to obtain certifications such as GCIH, GCFE, GCFA, GCSA, GMON, CISSP, or other relevant security certifications

• Weekly Direct Deposit
• 401K Matching
• Competitive medical, dental and vision insurance
• Consistent communication throughout your project
• ZeekTek Referral Program