Cybersecurity Analyst (2nd Shift)

DOT Security • Lake Forest, IL

3d • $75,000 - $100,000 • Onsite

About The Position

DOT Security is hiring a Cybersecurity Analyst to help protect customers by analyzing security alerts and investigating potential threats. The role works on the front lines of defense with a team that analyzes, develops, and delivers solutions to stop adversaries. This is an on-site position at the company’s Security Operations Center in Mettawa, Illinois, on the second shift.

The analyst monitors alerts from SIEM and other security tools, investigates network activity and phishing, distinguishes threats from benign events, and escalates and documents incidents. With experience, the analyst may also conduct threat hunts, analyze intrusion sets, tune security tools, and contribute to improved detection rules, automation playbooks, policies, and customer security environments.

Requirements

• Strong critical-thinking and problem-solving skills.
• Strong written and verbal communication skills, including the ability to explain information clearly to non-technical stakeholders.
• Knowledge of current threats and vulnerabilities.
• Familiarity with the MITRE ATT&CK framework.
• Knowledge of authentication, authorization, and access-control methods.
• Understanding of defense-in-depth principles and network security architecture.
• Understanding of IT security principles and methods, including firewalls, DMZs, VPNs, and encryption.
• Understanding of network traffic flows, TCP/IP, the OSI Model, and the ITIL framework.
• Knowledge of network protocols such as TCP/IP, DHCP, DNS, and directory services.
• Knowledge of Windows/Unix ports and services.
• Bachelor’s degree in Computer Science, Information Security, Information Technology, or Cybersecurity; relevant work experience may substitute for a degree.
• Authorization to work in the United States at the time of application.
• For positions subject to applicable export-control requirements, qualification as a U.S. Person or eligibility to obtain required government authorizations.

Nice To Haves

• Hands-on experience applying the MITRE ATT&CK framework.
• Hands-on experience with SIEM platforms or log-management systems.
• Experience in an IT infrastructure role such as Systems Administrator, Network Administrator, Systems Engineer, or Network Engineer.
• Ability to analyze malware.
• Understanding of system and application security threats, including buffer overflow, mobile code, cross-site scripting, PL/SQL injections, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.
• A master’s degree or four years of relevant work experience.
• CompTIA Security+ or CompTIA CySA+ certification.
• TCM Security PSAA (Practical SOC Analyst Associate), ECTHP (Certified Threat Hunting Professional), or BTL1 (Blue Team Level 1) certification.

Responsibilities

• Monitor and analyze real-time alerts from SIEM and other security tools to determine their cause.
• Investigate network traffic, interpret logs, and analyze packet captures.
• Detect, investigate, and alert on possible attacks, intrusions, anomalous activity, and misuse while distinguishing real threats from benign activity.
• Correlate information from enterprise sources to build situational awareness and assess the effectiveness of an observed attack.
• Investigate phishing emails.
• Escalate events and incidents according to established procedures and playbooks.
• Document findings and actions for clear communication with internal and external stakeholders.
• Proactively hunt for threats and adversary activity that does not trigger automated alerts.
• Conduct intelligence-driven threat hunts to identify indicators of compromise and adversary tactics, techniques, and procedures.
• Analyze intrusion sets to understand exploited weaknesses, methods, and system impact.
• Hunt for phishing campaigns and emerging attack vectors.
• Tune security tools for blocking, reporting, and proactive detection according to customer business needs.
• Contribute to projects that strengthen customer environments using lessons from incident response and threat hunting.
• Develop and refine detection rules, automation playbooks, and security policies.

Benefits

• 5-year Tiffany & Co. gift card or custom menswear, 10-year custom Rolex, and 20-year $20,000 check incentive rewards.
• Up to 20 days of PTO, 7 paid sick days, 12 or more paid holidays, and paid parental leave.
• Ongoing training and continued-education reimbursement.
• 401(k) and retirement plans with complimentary financial advisory services.
• Comprehensive health, disability, life, dental, and vision plans.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level