Cybersecurity Sr. Analyst

What success looks like in this role:

• Analyzing network traffic to identify compromised systems, negate denial of service attacks, and pinpoint resource abuse.
• Incorporate threat intelligence feeds into Microsoft Sentinel to enhance threat detection and response capabilities.
• Develop and implement security automation scripts and playbooks in Microsoft Sentinel to streamline security operations.
• Create reports and documentation related to security incidents, investigations, and overall security posture.
• Supporting priority incident investigations and threat intelligence discoveries with hunting expertise to identify the extent of any potential compromise.
• Respond to security incidents by containing, eradicating, and recovering from them using Microsoft Defender's tools and features.
• Educate users and colleagues about cybersecurity best practices and the use of Microsoft Defender.
• Perform onboarding and offboarding defender agents.
• Troubleshoot Defender agents not reporting to the portal
• Conduct investigations using EDR and live response
• Conduct Vulnerability Assessment using Defender.
• Investigate, identify, and prevent or mitigate abusive activities such as intrusion attempts, DDoS, malware distribution, phishing attacks, etc.
• Monitoring threat/vulnerability landscape and security advisories
• Appropriately manage time and customer issues based on issue severity and business needs
• Continuously monitors the security alerts queue, triages security alerts
• Monitors health of customer security sensors and SIEM infrastructure
• Ensures documented processes and procedures are relevant and up to date
• Investigate, document, and report on any security threat issues as well as emerging trends
• Enabling a world-class cyber defense program by working closely with other technical, vulnerability management, incident management, intelligence analyst and forensic personnel to develop a fuller understanding of the intent, objectives, and activity of cyber threat actors, and ultimately drive improvement to the organizations overall security posture
• Notify appropriate business stakeholders about serious security events, implement security improvements by assessing current situation, evaluating market trends, and anticipating requirements
• Perform threat hunting and threat analysis
• Monitor, detect, and analyze network threats
• Employ automation to aid in research and hunting tasks
• Write blogs and papers related to threat hunting and analysis
• Investigate, document, and report all security issues to contribute to incident response

You will be successful in this role if you have: