Information Security Analyst [Entry Level – College Grads]

Millenniumsoft•Franklin Lakes, NJ

11h•Hybrid

About The Position

This entry-level role focuses on enhancing the security of products and solutions through design, usage, and partnership, specifically within Integrated Supply Chain and Manufacturing Operational Technology (OT). The position requires a technical understanding of enterprise IT and OT environments and experience investigating complex technical security incidents. The analyst will utilize various investigative information, including log data, to identify and investigate potential security incidents.

Requirements

Strong understanding of security principles such as attack frameworks, threat landscapes, attacker/APT TTPs, etc.
In-depth knowledge of Windows operating systems.
In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
Previous experience in Network monitoring platforms.
Excellent analytical and problem-solving skills.
Proven ability to act independently and to execute with limited information and ambiguity.
Detail-oriented with the ability to promptly assess logs for accuracy as well as consistency.
Strong interpersonal skills with the ability to influence others in a positive and effective manner.
Ability to work in a team environment.
Excellent communication skills; both oral and written.
Demonstrated ability to contribute to a continuous learning and process improvement environment.

Nice To Haves

Degree in Cyber Security is a plus.
Other OS’s such as Linux is a plus.
Mitre Framework experience.
Experience in Security Operations Center is desired.
Associate’s or Bachelor’s Degree in a relevant field or equal level of experience.

Responsibilities

Active participation in 24x7 operations of the BD Security Operations Center, including proactive monitoring and providing cybersecurity status and reports.
Investigate and escalate security incidents in accordance with protocols.
Perform host-based analysis, artifact analysis, network packet analysis, and malware analysis to support security investigations and incident response.
Provide direction to managed service providers for alert triage, data collection, threat and vulnerability research, and diagnosis of system compromise or exposure.
Proactively threat hunt by analyzing events in the SIEM and other SOC tools to identify malicious activity missed by automated processes.
Develop content and tuning requests to improve alert fidelity and reduce false positives.
Ensure all incidents are supported with evidence and artifacts derived from analysis, providing clear and actionable event notifications.
Recommend detection and prevention/mitigation signatures and actions as part of a layered defensive strategy.
Identify advanced anomaly detection strategies and instrument systems to automate detections.
Develop program metrics and reporting, compiling and analyzing data for accurate and timely reporting of activity.
Assist with additional projects as needed.