Security Analyst

Title:

Security Analyst I

Location:

Fredericton, NB (Hybrid)

Shift Work Instructions:

Initial training is conducted during standard business hours (8AM to 5PM) - around 3 months.

4 days on / 4 days off rotation
-12-hour shifts.

Rotating schedule of: 8:00 AM to 8:00 PM and 8:00 PM to 8:00 AM

Monthly day/night rotation.

Candidates must be able to work onsite from the start of employment.

Position Summary:

The SOC 1 Security Analyst is responsible for monitoring security events, investigating alerts, performing incident triage, and escalating threats when appropriate. Working within our 24x7 Security Operations Centre, you will analyze security data, identify suspicious activity, and help protect client environments from emerging threats.

This role is ideal for individuals who are passionate about cybersecurity, enjoy problem-solving, and are eager to develop technical expertise in a fast-paced security operations environment. Successful analysts are naturally curious, demonstrate strong communication skills, and take ownership of investigating issues rather than simply escalating them.

Responsibilities:

Perform the detailed and repeatable execution of all operational tasks as documented in SOC processes and subordinate procedures.

Monitor the SOC main event tools for security events.

Close or elevate security events as necessary.

Update all relevant documentation such as shift logs and tickets, procedures.

Identify impact of incidents on systems, and using available tools determine if data was infiltrated.

Document and maintain a knowledge base of alarms (false positives and false negatives, blacklists, whitelists) that IDS and IPS encounter.

Serve as work area experts for security/information assurance policy recommendations.

Gather intelligence from sources outside the SOC (both internal and external sources) and leverage for operations.

Escalate incidents to applicable Bulletproof entities and or Bulletproof Customers for remediation.

Build relationships with other Bulletproof operations units to strengthen customer security posture.

Ensure security events and incidents are detected and escalated in a timely manner.

Provide analysis and investigation to determine if alerts or security events warrant incident classification.

Track incidents through to final resolution.

Perform incident triage to include determining scope, urgency, and potential impact.

Drive the Information Fusion Procedure where various data inputs are gathered, analyzed and presented in a meaningful, actionable manner.

Responsible for long term analysis and investigation into our customer’s network activity, and the creation of custom logic to detect unique or previously undetectable attacks on our customer information assets.

Required Education and Other Credentials:

Cybersecurity degree or 2-4 years helpdesk or network support experience; or any combination of education and experience, which would provide an equivalent background.

Microsoft SC-200 certification or ability to obtain it while working.

Security +, SSCP and other technical security certifications (e.g. Information Systems Security Architecture Professional, Information Security Engineering Professional, Certification and Accreditation Professional, or equivalent certifications) (Preferred but not required)

Qualifications &

Experience:

Background in networking or security to include intrusion detection/prevention.

Excellent written, verbal communication and organizational skills.

Knowledge and experience with PC’s, LAN topologies, routers, hubs, switches, and terminal servers.

Knowledge of security applications such as IDS, IPS, SEM, SIEM and anomaly detection tools.

Knowledge of trouble ticketing systems or CRM systems.

Understanding of the operation of test and analysis equipment such…