Cyber Security Operations Analyst - Entry

Perform triage of alerts from intrusion detection systems, anti virus, Windows/Linux/Mac systems, network infrastructure, and user behavior analytics.

Primary responsibilities will be included but are not limited to pre-defined monitoring tasks, review incoming emails or phone calls and following established escalation procedures to engage appropriate parties, as required.

Work with SOC Level 2 Analysts or other members of the Security Team to respond to and/or hand off tickets.

Work with SOC Level 2 Analysts or other members of the Security Team to respond to and/or hand off tickets.

You will manage and review security alerts, determine if the security events are false positives, true positives, or false negatives, and conduct an investigation on cyber security events.

Candidates must have good analytical and communication skills and be capable of determining appropriate points of escalation.

3-6 months of experience in a role involving incident response/handling procedures.

3-6 months of networking experience.

3-6 months of Unix/Windows OS experience.

1 year of relevant operational work experience in a Security Operations Center or IT support environment preferred.

English communication skills - written and verbal Advanced (B2+/C1)

Cyber Security Certifications is a plus but not required.

Familiarity conducting Host and network log analysis.

Familiarity with SIEM log analysis and obtaining logs through applicable query languages (Splunk, McAfee, Q-Radar, Sentinel, Etc.)

Knowledge of enterprise detection technologies(AV, EDR, IDS/IPS, Firewall, Etc).

Strong analytical, critical thinking and problem solving.

Ability to work under stress, tight deadlines and effectively in teams.