Cyber Detection and Response Analyst

Commonwealth of Massachusetts • Chelsea, MA

2d • Hybrid

About The Position

The Executive Office of Technology Services and Security (EOTSS) is seeking a Cyber Detection and Response Analyst I to join their Security Operations Center (SOC) team. This role is primarily responsible for incident triage, detection, response, and remediation activities within the SOC. Analysts will work with Security Engineers, Managed Security Service Providers, and SOC Managers to provide situational awareness through the detection, containment, and remediation of IT threats. The position involves cooperating with team members to detect and respond to security incidents, develop and follow security event protocols, and engage in security investigations. The primary work location is 200 Arlington Street, Chelsea, Massachusetts 02150. The work schedule is Monday through Friday, 9 AM to 5 PM EST, with a hybrid model of reporting to work that combines in-office and work-from-home days.

Requirements

• At least one (1) year of full-time or equivalent part-time experience in the field of information technology security, or any equivalent combination of the required experience and the substitutions below.
• An Associate’s degree in a related field may substitute for the required experience.

Nice To Haves

• Knowledge of SIEM (Security Information and Event Management) Splunk Preferred
• TCP/IP, VLANs, computer networking, routing, and switching
• IDS/IPS, penetration and vulnerability testing
• Windows and Linux operating systems
• Network protocols and packet analysis tools
• EDR Tools Palo Alto Cortex preferred
• Cloud computing (AWS/AZURE/GCP)
• Understanding of Proofpoint and other email security tools.
• Critical thinking and problem-solving abilities.
• Capability to communicate and listen to needs from organizational stakeholders.
• Bachelor’s Degree in computer science, Information Systems, Business Administration or other related field, or equivalent work experience.
• Security certifications desired but not required.

Responsibilities

• Managing day-to-day security monitoring, and IR activities, including but not limited to SIEM monitoring, Endpoint Detection and Response using Palo Alto’s Cortex XDR, notifying agencies of potential malicious activities, managing, and/or maintaining security incident response practices
• Assist in detection and incident response functions including, but not limited to, Security Incident Reporting tickets, customer and constituent notification, tracking, and reporting.
• Conduct and/or participate in agency, state, regional, and/or national cyber security incident simulation exercises
• Monitor, report, and respond to anomalous Internet, Extranet, and/or Intranet activity related information provided through internal operations and/or credible external third-party threat intelligence organizations.
• Work with EOTSS customer organizations and EDR vendor to test software revision, EDR client file updating, and/or EDR related status reporting
• Assist in the development and delivery of cybersecurity education and awareness initiatives on behalf of state government.
• Review third party alerts to maintain overall situational awareness of security issues affecting Commonwealth agencies, EOTSS customer organizations, and/or MS-ISAC members.
• Conduct research into new threats that may affect Commonwealth agencies, EOTSS customer organizations, and/or local entities.
• Provide and promote security awareness.
• Assist in phishing campaigns for all users across the Commonwealth while furthering overall security awareness programs.
• Support the preparations of security reports to management on security system activities and performance utilizing enterprise security tools (Tenable, DHS, Expanse, etc.)
• Support troubleshooting security related problems.
• Other duties and responsibilities as assigned.

Benefits

• Outstanding suite of employee benefits that add to the overall value of your compensation package.
• A work experience that supports you, your loved ones, and your future.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Associate degree