Cyber Security Analyst

Founded over 35 years ago, First Quality is a family-owned company that has grown from a small business in McElhattan, Pennsylvania into a group of companies, employing over 5,000 team members, while maintaining our family values and entrepreneurial spirit. With corporate offices in New York and Pennsylvania and 8 manufacturing campuses across the U.S. and Canada, the companies within the First Quality group produce high-quality personal care and household products for large retailers and healthcare organizations.

Our personal care and household product portfolio includes baby diapers, wipes, feminine pads, paper towels, bath tissue, adult incontinence products, laundry detergents, fabric finishers, and dishwash solutions. In addition, we manufacture certain raw materials and components used in the manufacturing of these products, including flexible print and packaging solutions. Guided by our values of humility, unity, and integrity, we leverage advanced technology and innovation to drive growth and create new opportunities.

At First Quality, you'll find a collaborative environment focused on continuous learning, professional development, and our mission to Make Things Better. We are seeking a Cyber Security Analyst for our First Quality Enterprises, LLC, working remotely.

The Information Security team is actively seeking tier 2 SOC analyst to join our SOC operations team. In this role, you will be responsible for incident detection, investigation and response, rules development tuning and improvement, defining and developing automations, and incorporating Threat Intelligence and Threat Hunting activities to enhance detection and mitigation strategies. Primary responsibilities include:
Incident Detection and Response
- Monitor and analyze alerts generated by SIEM/SOAR platforms and user reports, investigate security incidents, and execute containment and eradication procedures to minimize impact and restore normal operations. Tuning &- Optimization
- Continuously refine detection rules and SOC processes to reduce false positives, enhance detection accuracy, and improve overall operational efficiency. Research &- Development
- Explore emerging threats and attack techniques to develop and implement new detection rules to expand visibility and strengthen the organization’s security posture. Threat Hunting
- Proactively hunt for hidden threats by analyzing logs and identifying gaps missed by existing security tools and improve security posture. Threat Intelligence
- Review threat intelligence feeds, channels and articles to identify potential risks and proactively strengthen defenses. Automation Development
- Design, implement, and maintain automation solutions to streamline SOC workflows, reduce manual effort, and accelerate incident response times. Reporting
- Prepare and present comprehensive reports on key SOC activities, metrics, and security trends to stakeholders and management. Penetration Testing Exercises
- Participate in Red and Purple Team exercises to assess and improve the effectiveness of security controls and incident response capabilities.

The ideal candidate should possess the following:
Hands-on experience working with SIEM platforms Familiarity with EDR solutions like Crowd Strike, Sentinel One, Microsoft Defender for Endpoint, Cortex XDR. Understanding and familiarity with interpreting common log sources for monitoring and investigation (e.g. Firewall, Azure AD, Windows Security Log, Email, Proxy/URL Filtering etc.) Solid grasp of prevalent attack types, including phishing, brute-force attacks, malware, and data exfiltration techniques. Demonstrated proactive mindset, strong sense of responsibility, and urgency in addressing security incidents and tasks.

Strong motivation and willingness to continually learn and grow, adapting to new tools and evolving threat landscapes. Minimum of 1-2 years of experience working in a Security Operations Center (SOC) environment, either in-house or with a Managed Security Service Provider (MSSP). Bachelor's degree in Computer Security, Cybersecurity, Information Security, or a related field preferred. Additional relevant experience may be considered…