Security Analyst I

Cyderes•Bentonville, AR

13d•Hybrid

About The Position

The Managed Services Security Analyst is responsible for security solutions for clients. The Security Analyst I will demonstrate the capacity to exceed client expectations representing and promoting the Cyderes brand through positive interaction with other teams within the company. Perform deep dive investigations into security threats, understand and implement MITRE mapping to identify customers current security posture.

Requirements

Have 1 or more years of progressive IT security experience.
Have experience administering Windows, Linux/Unix, or macOS systems.
Demonstrate an advanced understanding of networking concepts and the network artifacts.
Have experience using Endpoint Detection and Response (EDR) solutions such as Cortex XDR, SentinelOne, CrowdStrike, or Microsoft Defender.
Have knowledge of at least one leading SIEM platform, such as Google SecOps, Microsoft Sentinel, Splunk, Elastic, IBM QRadar, or Chronicle.
Have experience with SOAR platforms, Google SecOps SOAR.
Have familiarity with cloud security posture management (CSPM) platforms such as Wiz.
Demonstrate proficiency using Google Workspace (Gmail, Google Chat, and Google Meet) and Slack in a professional environment.
Hold at least one industry certification (Security+, CEH, OSCP, or a SANS certification such as GCIH, GCIA, GSEC, or GMON), or actively work toward one.
Demonstrate basic scripting or programming experience in Python, JavaScript, PowerShell, Bash, or a similar language.

Responsibilities

Perform assessment and advanced analysis across endpoint, server, and network infrastructure.
Perform threat hunting on customer networks to detect and isolate threats while providing recommendations.
Conduct proactive security investigations and searches within client environments to detect malicious activity.
Coordinate incident investigations and perform deep-dive analysis on detected threats.
Identify indicators of attack and compromise through alerts, threat hunting, and investigation notes.
Apply the MITRE ATT&CK framework to map customer use cases to tactics and techniques.
Use Google SecOps SOAR to automate investigation and response workflows.
Participate in an after-hours on-call rotation as an Incident Controller.
Scope customer security incidents and determine impact.
Document findings and communicate recommendations and security guidance based on analysis.
Analyze raw log data through SIEM platforms to support escalations and investigations.
Collaborate with our teams and customers using Google Workspace (Gmail, Google Chat, Google Meet) and Slack.
Maintain current knowledge of the evolving threat landscape
Report into Senior Operations leadership