L1: Security Analyst; onsite

Role Overview

We are looking for a Security Analyst to join the Lumifi Cyber SOC. Security Analysts are expected to handle customer facing investigations, and to participate in interaction with customers and other teams through email or phone.

• Triage alerts and determine if further investigation or action is required by the customer.
• Assist customers with the investigation and response of incidents throughout the incident response process.
• Perform investigations of customer requests and provide further contextual information along with recommended actions.
• Proactively threat hunt using network and host data within customer environments.

Ability to analyze packet captures/data and logs to perform incident response and identify potential compromises to customer networks, strong verbal/written communication and interpersonal skills to document and communicate findings, elevate critical incidents, and interact with customers.

• Ability to analyze packet captures/data and logs to perform incident response and identify potential compromises to customer networks.
• Possesses a understanding of the TCP/IP protocol suite, security architecture, and common TTP's (tactics, techniques, and procedures) used by threat actors.
• Knowledge of analyzing both log and packet data in a SIEM (RSA Net Witness, Azure Sentinel, Splunk, etc.).
• Understanding of incident response methodologies and reporting.
• Experience using ticketing systems for tracking (JIRA, Remedy, Service Now, etc.).
• Strong verbal/written communication and interpersonal skills.

• self-managed time off
• great healthcare coverage
• holistic well-being programs
• fully stocked snack bar
• comprehensive professional development benefits