IT Security Operations Analyst

Role & responsibilities

• At least five years experience in IT systems administration/engineering, network administration/engineering, and/or DevOps
• At least two years’ experience in information security, including but not limited to incident response, vulnerability assessment, and alerting/monitoring
• Strong understanding of cloud technologies up and down the stack
• Strong understanding of Windows and *nix systems as well as network architecture and protocols, including TCP/IP, DNS, and HTTPS.
• Experience with anti-malware/XDR/advanced threat detection (Windows Defender, CrowdStrike Falcon, SentinelOne), network monitoring (Zscaler, Palo
• Alto Networks, Cisco Meraki, Suricata
• , Bro), identity service providers (Microsoft Entra ID), and log analysis tools (Splunk, Microsoft Sentinel, Graylog, ELK)
• Ability to troubleshoot
• Ability to communicate proficiently with technical and non-technical people around the world
• Become SANS GIAC certified within six months or hold a current and valid certification in any of the following: (ISC)2: CISSP, CCSP, SSCP, CAP; SANS GIAC: GCIH, GREM, GCIA, GCFA, GCFE, GPEN, GCED; CompTIA: Security+; EC Council: CEH; other IT certifications considered.
• Preferred:
  
• Experience using Splunk
• Experience building solutions in Python, PowerShell, zsh, and bash
• Bachelors' degree in Computer Science, Electrical/Computer Engineering, Information Security, Management Information Systems, or equivalent experience