Senior IT Security Analyst

Responsibilities

• Your primary work will involve using our SIEM platform to fully investigate network security events, documenting your investigations in writing via a ticketing system, communicating with stakeholders, and resolving any identified issues.
• Gather and analyze intelligence from a variety of sources and communicate a summary of impactful intelligence to internal stakeholders.
• You will be responsible for identifying tuning opportunities and additional SIEM rules/use cases based on the ever changing threat landscape and needs of the organization.
• Provide threat and vulnerability management oversight and communicate threat and vulnerability observations clearly to leaders and subject matter experts, properly relaying risk factors.
• You will work with other subject matter experts within the Security Services team to deliver a unified security service experience to all markets while also leveraging each other’s expertise and services to improve existing processes.
• You will work closely with the Log Collection and Platform management team to identify and implement automations for common use cases for more efficient response and resolution.
• You will lead brand collaboration calls to highlight detections identified within the market, including details such as resolution status and follow up, to ensure events are fully documented and resolved.

• Effective tactical and strategic communication skills with technical, non-technical, and executive leadership.
• 1 to 3 years’ experience of working in a high-performance Cyber SOC team in a cyber-security environment.
• College degree in Cyber Security or Information Technology or equivalent work experience.
• Certifications like CCNA, Security+, Network+, GCIH, GSOC, GSEC, GSED, GMON.
• Experience with an enterprise-grade SIEM platform (e.g., QRadar, Log Rhythm, Crowd Strike).
• Working knowledge in network access control, intrusion prevention & detection systems, firewalls, routers, incident response, information security methods & risk management.
• Working knowledge of the Cyber Kill Chain.
• Experience in high-volume environments handling billions of records per day.
• Experience in Security Event analysis & triage, incident handling & root‑cause identification.
• Proficiency in TCP/IP & other network protocols.
• Passion and enthusiasm for Cyber Security.
• Experience with Red/Blue team exercises & table‑top exercises.
• Experience running one or more services within a Security Operations Center.
• Excellent time management & problem‑solving skills.
• Effective communication, including verbal, report writing & presentation skills.
• Ability to deal with complexity & uncertainty.
• Analysis & interpretation of data into useful management.