Tier 2 Cyber Analyst – Remediation

Responsibilities

• Primary analysis and remediation.
• Supports a 24x7x365 Security Operations Center and monitors security tools, assesses threats, and risks involving client infrastructure.
• Provides analysis and remediation tier response to security incidents for managed services customers.
• Provides firewall change management and change control services.
• Follows standard operating procedures for detecting, classifying, and reporting incidents under the supervision of the SOC Manager and in partnership with Tier 2 SOC Analysts.

• Experience in analyzing security logs generated by Intrusion Detection/Prevention Systems (IDS/IPS) is required.
• Experience performing security analysis using Security and Incident Event Management (SIEM) technologies systems is required.
• Experience performing analysis utilizing IDS consoles is required.
• Experience with Linux is preferred.
• ARCSIGHT and SPLUNK
• Candidate must have a total of 10 years of applicable experience.
• The experience can be a combination of degree and work history. This can be a High School degree and 10 years of work history OR an Associate’s and 8 years, a Bachelors’ and 6 years, a Masters and 1 years or a PhD and 0 years of work history.
• One of the following certifications:
  Security+, CEH, GCIA, CISSP or similar

• security analysis
• incident response
• firewall change management
• security log analysis
• Intrusion Detection Systems
• Intrusion Prevention Systems
• Security Information and Event Management
• Linux
• ARCSIGHT
• SPLUNK

• analytical skills
• communication
• team collaboration
• problem-solving
• attention to detail

• Security+
• CEH
• GCIA
• CISSP