Associate Security Analyst

DirectDefense•Englewood, CO

8d•$82,000 - $95,000

About The Position

DirectDefense has an immediate opening on our Security Operations team. This is an elite team of Security Analysts who do not merely monitor for attacks and malware, they actively and aggressively hunt for the evidence of compromise within our client's environments around the clock and provide actionable guidance for remediation. As a Security Analyst, you will be part of a revolution in managed security. You will work with brilliant people to spot, track, and eradicate hackers and malware. You will also be on the ground floor of building a next-generation Security Operations Center.

Requirements

3-5 years of relevant experience in Cybersecurity, risk management, security operations, network operations, or equivalent knowledge.
Experience with SIEM and EDR tools for monitoring, detection, and response to potential security incidents.
Proven experience investigating potential threats, either through proactive threat hunting or analyzing customer-reported tickets.
Strong ability to triage events, accurately identifying real threats versus false positives.
Proficient in log analysis, interpreting system logs to detect security events and identify root causes.
Familiarity with threat intelligence, applying findings to improve detection and response efforts.
Understanding of network protocols and system vulnerabilities to assess and address security risks effectively.
Knowledge of regulatory compliance and security frameworks (e.g., ISO, NIST, PCI, GDPR) and their application.
Excellent analytical and critical thinking skills, enabling accurate evaluation of complex security data.
Effective communication skills, capable of documenting findings clearly and providing actionable recommendations.

Responsibilities

Analyze user behavior and logs and alerts from a variety of different technologies (NGAV / EDR, Firewall, IDS / IPS, Web Proxy, etc.) for clients from a variety of industries.
Monitor, triage, and investigate SIEM alarms and client support requests.
Assist with developing and tuning new SIEM detection capabilities.
Contribute to and participate in documenting Incident Response activities.
Conduct regular vulnerability scans, analyze the results, and suggest remediations.
Conduct reporting on security threats, metrics, and defense effectiveness and deliver to a variety of client audiences.