Description

You own security event detection, analysis, and containment for critical systems.

This role is on-site.

Responsibilities

• Respond to SOC alerts, performing analysis and containment of security events.
• Support the Cyber Incident Response Team (CIRT) in attack detection and containment.
• Operate configuration management and File Integrity Management programs to track baseline deviations.
• Collect and analyze threat intelligence data, mapping products to the MITRE ATT&CK Framework.
• Design alerting content for critical assets and document response playbooks.

Required Skills

• 5+ years working in cyber threat or information security.
• Proficiency with cloud security and incident response capabilities in Azure.
• Proficiency with configuration management scanning tools.
• Knowledge of Tripwire or similar file integrity management tools.
• Understanding of security technologies: IDS/IPS, firewalls, AV, proxies, EDR.
• Proficiency in scripting languages like JavaScript or Perl.
• Familiarity with compliance regulations: SOX, PCI-DSS, GLBA, and Federal Banking regulations.
• Ability to map threats to MITRE; familiar with STRIDE and OSI model.

Preferred Skills

• Strong technical writing skills for documentation.

Key Skills

Education

Bachelor's degree