Cyber Defense Ops Specialist
About The Position
The Cyber Defense Ops Specialist is an individual contributor in the Cyber Defense Threat Detection (CDTD) Cyber Defense Operations Center (CDOC). The role performs security monitoring, intrusion analysis, incident handling, data loss prevention, privileged user monitoring, security incident management, malware detection and eradication, and recognition of hacker and incident-response tactics, techniques, and procedures. The specialist is expected to stay current with security technology, the threat landscape, and emerging threats. The position works 40 hours per week over four days, Wednesday through Saturday, from 7:00 a.m. to 5:00 p.m. It is based at the Citizens Bank Johnston Campus and is not a remote opportunity.
Requirements
- At least 1 year of security industry experience, preferably in a Security Operations Center (SOC) environment.
- Strong verbal and written communication skills, including the ability to communicate technical concepts to non-technical audiences.
- Excellent critical-thinking, problem-solving, and decision-making skills.
- Active listening, attention to detail, customer service, prioritization, and problem-solving skills.
- Ability to work independently or strategically.
- Ability to adapt and demonstrate flexibility in a dynamic environment.
- Bachelor’s degree or an equivalent combination of experience.
Nice To Haves
- Experience or knowledge of Security Information and Event Management tools such as ArcSight and Splunk.
- Experience or knowledge of Intrusion Prevention/Detection tools such as FirePower, McAfee, and Palo Alto.
- Experience or knowledge of database security tools such as Guardium and jSonar.
- Experience or knowledge of Data Loss Prevention tools such as Symantec and Triton.
- Experience or knowledge of firewalls such as Cisco, Palo Alto, and Check Point.
- Experience or knowledge of application security tools, including Web Application Firewalls.
- Experience or knowledge of vulnerability tools.
- Experience or knowledge of cyber security incident response.
- Experience or knowledge of Host Intrusion Detection Systems.
- Experience or knowledge of XDR and antivirus tools such as CrowdStrike, Symantec, and Microsoft Defender.
- Relevant industry certifications, such as Net+, Sec+, CEH, Pentest+, AWS Certified Cloud Practitioner, or Microsoft Azure Fundamentals.
Responsibilities
- Perform ongoing security monitoring and threat analysis, including analyzing logs, NetFlow data, and packet captures.
- Identify potential IT security incidents and escalate information to appropriate senior staff.
- Assess threat and vulnerability information from internal and external sources and promptly apply applicable mitigation techniques.
- Perform intrusion analysis and incident handling, data loss prevention, privileged user monitoring, security incident management, and malware detection and eradication.
- Recognize hacker and incident-response tactics, techniques, and procedures.
- Stay current with security technology, the threat landscape, and emerging threats.
Benefits
- Opportunity to earn an annual discretionary bonus.
- Medical coverage.
- Dental coverage.
- Vision coverage.
- Retirement benefits.
- Maternity leave.
- Paternity leave.
- Flexible work arrangements.
- Education reimbursement.
- Wellness programs.
- Paid time off policy that exceeds mandatory paid sick or paid time away policies in applicable U.S. jurisdictions.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
