Associate Security Analyst

DirectDefense•Englewood, CO

About The Position

DirectDefense has an immediate opening on our Security Operations team. This elite team of Security Analysts doesn't just monitor for attacks and malware; they actively and aggressively hunt for evidence of compromise across our clients' environments around the clock and provide actionable remediation guidance. As a Security Analyst, you will be part of a revolution in managed security. You will work with brilliant people to spot, track, and eradicate hackers and malware. You will also be on the ground floor of building a next-generation Security Operations Center.

Requirements

3-5 years of relevant experience in Cybersecurity, risk management, security operations, network operations, or equivalent knowledge.
Experience with SIEM and EDR tools for monitoring, detection, and response to potential security incidents.
Proven experience investigating potential threats, either through proactive threat hunting or analyzing customer-reported tickets.
Strong ability to triage events, accurately identifying real threats versus false positives.
Proficient in log analysis, interpreting system logs to detect security events and identify root causes.
Familiarity with threat intelligence, applying findings to improve detection and response efforts.
Understanding of network protocols and system vulnerabilities to assess and address security risks effectively.
Knowledge of regulatory compliance and security frameworks (e.g., ISO, NIST, PCI, GDPR) and their application.
Excellent analytical and critical thinking skills, enabling accurate evaluation of complex security data.
Effective communication skills, capable of documenting findings clearly and providing actionable recommendations.

Responsibilities

Analyze user behavior, logs, and alerts from a variety of different technologies (NGAV / EDR, Firewall, IDS / IPS, Web Proxy, etc.) for clients from a variety of industries.
Monitor, triage, and investigate SIEM alarms and client support requests.
Assist with developing and tuning new SIEM detection capabilities.
Contribute to and participate in documenting Incident Response activities.
Conduct regular vulnerability scans, analyze the results, and suggest remediations.
Conduct reporting on security threats, metrics, and defense effectiveness and deliver to a variety of client audiences.