Temporary Risk Consulting Analyst
About The Position
We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. We are seeking individuals with an interest in working in the field of cybersecurity and a desire to help organizations improver their operations to join our team and help run the ongoing security operations for RSM clients in a variety of industries and geographic locations. Successful candidates will have working knowledge in some or all of these areas – IT operations, security monitoring, Active Directory, Cloud technologies. At RSM, analysts work with large and small companies in variety of industries. They develop strong working relationships with their peers within the security operations center (SOC) while learning their clients’ businesses and challenges facing their organizations. Analysts work as part of a broader team under the direction of more senior analysts and a shift lead in support of multiple clients. Working in a mutually respectful team environment helps our analysts perform at their best and integrate their career with their personal life.
Requirements
- 0-2 years’ experience working in a security operations center or networking capacity
- Must have a naturally curious mindset and approach
- Proven troubleshooting skills
- Knowledge of Active Directory administration
- Understanding of cloud technologies
- Experience supporting various operating systems such as Windows/Linux
- Understanding of network protocols
Nice To Haves
- Security incident and event management (SIEM) tools such as Splunk, LogRhythm, Devo, etc.
- Common cloud platforms – Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform
- Security orchestration and automated response (SOAR) tools such as: Demisto, Phantom, Forescout, etc.
- Vulnerability tools such as: Kenna, Tenable, Qualys, etc.
- Threat intelligence tools such as Recorded Future and ThreatConnect
- Endpoint detection and response tools such as: CarbonBlack, Crowdstrike, etc.
- Microsoft Office 365
- Cloud access service brokers such as Netskope, ZScaler, McAfee, Forcepoint
Responsibilities
- Investigate incidents using SIEM, automation and other technologies (i.e ServiceNow)
- Analyze, escalate, and assist in remediation of critical information security incidents
- Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment
- Setup and execution of vulnerability scans
- Perform initial analysis and investigation into alerts as they are seen
- Performing initial malware analysis utilizing automated means
- Incident intake, ticket updates and reporting of cyber events
- Understanding, identifying and researching indicators of compromise (IOCs)
Benefits
- Competitive benefits and compensation package
- Flexibility in your schedule
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
Education Level
No Education Listed
