Security Analyst

The Company

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We're growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.

The Security Analyst role, as part of our Managed Security Services team, is responsible for ensuring that client environments are monitored for security incidents and escalating notable events to clients and/or internal crew members.

Opportunities are available on 1st, 2nd and 3rd shifts (Eastern Time Zone).

• Live by the NuHarbor Corporate Values:
  Help Clients Win, Always Improve, Protect the House.
• Responsible and accountable for analyzing security alerts, events, and trends in order to effectively communicate the value of NuHarbor services.
• Independently and autonomously conducts investigations to provide actionable, context relevant, escalations to clients.
• Provide analysis and interpretation of vulnerability scans and assessments.
• Ensure client facing and internal escalations are serviced in a timely fashion.
• Leverage their understanding of client environments to identify and communicate security gaps and potential mitigations.
• Identify and scope opportunities for improvements in efficiency, quality, maturity, and capabilities.
• Maintain current certifications and training relevant to their role as defined in the NuHarbor Career Course Toolkit.
• Develop, implement, and improve documentation and operational processes.
• Use an advanced understanding of, and ability to communicate, security technologies to mitigate cyber risks.
• Be responsible for ensuring reports are generated to standard and on-schedule.
• Maintain the NuHarbor Security threat intelligence platform.
• Perform threat hunting in client environments.
• Proactively identifies and communicates internal and client risks.
• Perform intelligence gathering and analysis to influence technical control development, client security program maturity, and client attack surface defense.
• Continually researches the cyber industry to stay up to date on current threats, threat actor's tactics and techniques, and emerging vulnerabilities.

The requirements for this role:

• Bachelor's Degree and two (2) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
• In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• Demonstrated experience with SOC operations, executing security event triaging and tuning.
• Strong understanding of Incident Response phases and demonstrated experience responding to security incidents.
• Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset.
• Two (2) years' experience with Splunk Enterprise Security, Crowd Strike Falcon, and Microsoft Sentinel or Defender.
• Demonstrated experience with Endpoint Detection and Response (EDR) or Security Orchestration Automation and Response solutions.
• Demonstrated experience with scripting in industry standard languages in a manner that supports automation solutions.
• Must be a citizen of the United States.

• Bachelor's Degree and Five (5) or more years in the Information Technology field.
• Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.)
• Holds at least one of the following Crowd Strike certifications: CCFR, CCFA, CCFH
• Demonstrated experience writing runbooks and support procedures.
• Excellent written and verbal communication, and collaboration skills.
• Experience executing initial triaging and response through a SOAR platform.
• Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file…