Cybersecurity Incident Response Team Security Analyst II

Jabil•Tampa, FL

1d•Onsite

About The Position

The Cybersecurity Incident Response Team Security Analyst II performs advanced monitoring and reporting of security events, administers security tools and devices to ensure proper functionality, and investigates events to provide data needed for incident response. The role supports Jabil’s 24/7 global security operations and is located onsite in St. Petersburg, Florida. Candidates must be U.S. citizens. The analyst handles escalations, conducts incident analysis and investigations, supports response to large-scale security incidents, and advises on remediation. The position also includes routine administration and health checks for security tools, development and refinement of monitoring reports and investigative tools, threat-detection improvements, audit participation, mentoring, metrics and trend analysis, and leadership of small projects as assigned. The analyst is expected to maintain confidentiality, respond effectively under enterprise-wide pressure, and help meet customer expectations.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related field, or 3–5 years of experience in Security Operations, Network Administration, or equivalent knowledge.
Security-related certification such as Security+, GSEC, or GCIH.
Strong working knowledge of perimeter technologies, such as firewalls and proxies.
Strong working knowledge of security tools, such as SIEM, NetFlow, IDS/IPS, endpoint solutions, and DLP.
Strong working knowledge of networking, including TCP/IP, network architecture, and packet capture and analysis.
Advanced technical knowledge of operating systems, network services, applications, and security logging.
Ability to define problems, collect data, establish facts, and draw valid conclusions.
Ability to communicate analytical data effectively to varied audiences, including executives.
Ability to influence and build credibility as a peer through interpersonal and leadership skills.
Ability to perform under significant enterprise-wide pressure with a sense of urgency.
Must be a U.S. citizen.

Nice To Haves

Master’s degree in Information Security, Cybersecurity, or Computer Network Defense.
Additional relevant security certifications, such as GCIA, GCED, GMON, CEH, CCNA, or CySA+.
Previous experience with scripting or programming, such as Python, PowerShell, PERL, or Splunk SPL.
Direct experience in an enterprise-level Cyber Incident Response Team or Security Operations Center.

Responsibilities

Support 24/7 global operations by responding to security events; participate in on-call coverage as required.
Perform advanced monitoring of security events and review device security logs.
Investigate events by correlating data from multiple sources to assess risk to Jabil.
Conduct advanced incident analysis using logs and monitoring activities.
Assist with large-scale security incident investigations and response, and advise on remediation.
Create and refine log-monitoring reports, searches, and basic investigative tools.
Handle escalations from SOC Security Analysts I.
Analyze the environment through activities such as port scans, activity monitoring, and intrusion detection.
Perform intermediate-level health checks and routine administration of security tools.
Distinguish security events from incidents and initiate appropriate incident response actions.
Participate in IT security or customer audits.
Mentor and educate security staff members.
Drive continuous improvement through trend-reporting analysis and metrics management.
Ensure procedures and work instructions are efficient and nonredundant.
Identify and implement new analytic methods for detecting threats.
Solve problems quickly and effectively to meet customer expectations.
Maintain confidentiality in internal and customer-specific security activities.
Lead small projects or initiatives as assigned.
Perform other duties and responsibilities as assigned.