Security Analyst II (Weekends/Days)

Deepwatch • Tampa, FL

6d • $77,500 - $97,000 • Hybrid

About The Position

Come join Deepwatch’s team of world-class cybersecurity professionals and the brightest minds in the industry. If you're ready to challenge yourself with work that matters, then this is the place for you. We're redefining cybersecurity as one of the fastest growing companies in the U.S. – and we have a blast doing it! Who We Are Our core values drive everything we do at Deepwatch, including our approach to tackling tough cyber challenges. We seek out tenacious individuals who are passionate about solving complex problems and protecting our customers. At Deepwatch, every decision, process, and hire is made with a focus on improving our cybersecurity solutions and delivering an exceptional experience for our customers. By embracing our values, we create a culture of excellence that is dedicated to empowering our team members to explore their potential, expand their skill sets, and achieve their career aspirations, which is supported by our unique annual professional development benefit. Deepwatch is looking for a highly motivated, self-driven, technical analyst dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. The Deepwatch Security Operations Center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers. The Deepwatch Security Operations Center is a unique approach to how we support our customers and ultimately provide an experience not found anywhere else. You’ll be an integral part of supporting our customers by understanding their bespoke environment, needs and challenges. You will be playing a key role in supporting some of the top organizations in the world, and have the opportunity to develop your skills by working with the best responders in the industry, your team and your shift !

Requirements

• Have a strong understanding of cyber security principles, concepts and practices including the ability to perform a complete and thorough incident investigation and triage with limited support from Analyst III’s
• Know your way around SIEM platforms (Splunk, Google SecOps or Microsoft Sentinel preferred), how to perform queries and leverage various log sources to perform investigations
• Operate autonomously requiring minimal support on investigative actions
• Competency with in-depth header analysis, hashes and Windows/macOS/Linux logs
• Demonstrate the ability to pivot to other log sources, cloud systems or consoles to perform a comprehensive analysis from multiple data sources
• Have a basic understanding of modern EDR, email security and cloud identity platforms
• A desire to support others and uplift the program and team through updating training materials and SOPs
• Strong written and verbal communication skills including the ability to write well-written reports and analysis that’s thorough, accurate and complete
• Provide the customer with a complete understanding of the investigation

Nice To Haves

• Sec+, CySA, CEH, GSEC, or equivalent certification preferred

Responsibilities

• Support incident handling processes across multiple platforms and security technologies including Windows, Linux and macOS
• Provide in depth analysis from escalated requests originating from Security Analyst 1
• Validate suspicious events by performing investigations using SIEM and SOAR technologies, leveraging Deepwatch proprietary tooling, intelligence and OSINT, TTPs and IOCs
• Identify gaps in customer environments, data ingested or configuration errors which reduce telemetry quality
• Work with customer and leadership to surface and resolve concerns
• Provide support to Security Analyst I including coaching and training as necessary
• Leverage your knowledge of Alert Triage, SOC Operations, and Defense in Depth (DiD) to contribute to projects for overall customer success
• Produce high-quality written and verbal communications, recommendations, and findings to customer management in a timely manner
• Surface opportunities for improvement in the SOC and for the customer and be a change agent for measurably improving our customer security posture and experience
• Continue to sharpen your skills and capabilities on the job, and through the Deepwatch development program

Benefits

• Medical, dental, vision, and disability insurance
• Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
• Unique professional development benefits with Annual “development dollars” to support our people growth and development
• Wellness contests and monthly educational programs
• 401(K) retirement program

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 101-250 employees