Description

Lead security event analysis and provide technical guidance to analysts. Own the final review of investigations before escalation.

Responsibilities

• Analyze inbound security events using SIEM and review alerts within SOAR platforms.
• Perform final line of review for investigations conducted by Level 1 and 2 analysts.
• Lead investigative analysis and incident research to document accurate threat responses.
• Create and maintain SOPs, department documentation, and daily compliance reports.
• Collaborate with security engineers and architects to deliver security services across business units.

Required Skills

• 10+ years of experience in cybersecurity or related roles.
• Deep understanding of networking protocols: TCP/IP, UDP, DNS, DHCP, HTTP, HTTPS, and VPN.
• Strong knowledge of OS architectures across Windows, UNIX, Linux, and MacOS.
• Proficiency in Microsoft technologies including Active Directory, DNS, and DHCP.
• Expertise in cybersecurity concepts: phishing, malware, vulnerabilities, and DDoS.
• Understanding of identity and access management and authentication technologies.
• Ability to collect and correlate data from disparate systems for complex analysis.
• Experience working in a shift-based environment.
• Strong written communication and public speaking abilities.

Preferred Skills

• Knowledge of IPS, Web Proxies, EDR, Firewalls, or Vulnerability Scanners.
• Certifications such as Network+, Security+, CySA+, CCSP, CCSK, GCIH, GCIA, GCFE, GREM, or GCFA.

Key Skills

Education

Any Graduate