Cybersecurity Incident Response Team Security Analyst II

Jabil•Tampa, FL

14d•Onsite

About The Position

The Cybersecurity Incident Response Team Security Analyst II performs advanced monitoring and reporting of security events, administers security tools and devices to ensure proper functionality, and investigates events to provide information needed for incident response. The role supports Jabil’s global security operations, including responding to security events and being on call as required. It is located on-site in St. Petersburg, Florida, and candidates must be U.S. citizens.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related field, or 3–5 years of Security Operations, Network Administration, or equivalent knowledge.
Security-related certification such as Security+, GSEC, or GCIH.
Strong working knowledge of perimeter technologies such as firewalls and proxies.
Strong working knowledge of security tools such as SIEM, NetFlow, IDS/IPS, endpoint solutions, and DLP.
Strong working knowledge of networking, including TCP/IP, network architecture, and packet capture and analysis.
Advanced technical knowledge of operating systems, network services, applications, and security logging.
Ability to define problems, collect data, establish facts, and draw valid conclusions.
Ability to communicate analytical data effectively to varied audiences, including executives.
Ability to influence and build credibility as a peer through interpersonal and leadership skills.
Ability to perform under significant enterprise-wide pressure with a sense of urgency.
Must be a U.S. citizen.

Nice To Haves

Master’s degree in Information Security, Cybersecurity, or Computer Network Defense.
Relevant security certifications such as GCIA, GCED, GMON, CEH, CCNA, or CySA+.
Previous scripting or programming experience, such as Python, PowerShell, PERL, or Splunk SPL.
Direct experience in an enterprise-level Cyber Incident Response Team or Security Operations Center.

Responsibilities

Support 24/7 global operations by responding to security events; be on call as required.
Monitor security events and review device security logs.
Investigate events by correlating data from multiple sources to determine risk to Jabil.
Analyze incidents using logs and monitoring activity.
Assist with large-scale security incident investigations and response, and advise on remediation.
Create or refine log-monitoring reports, searches, and basic investigative tools.
Handle escalations from SOC Security Analysts I.
Analyze the environment, including port scans, activity monitoring, and intrusion detection.
Perform intermediate-level health checks and routine administration of security tools.
Distinguish security events from incidents and initiate appropriate incident response actions.
Participate in IT security or customer audits.
Mentor and educate security staff members.
Drive continuous improvement through trend reporting, analysis, and metrics management.
Ensure procedures and work instructions are efficient and nonredundant.
Identify and implement new analytic methods for detecting threats.
Meet customer expectations by resolving problems quickly and effectively.
Maintain confidentiality in all internal and customer-specific security activities.
Interpret instructions provided in written, oral, diagram, or schedule form.
Lead small projects or initiatives as assigned.
Perform other duties and responsibilities as assigned.