Security Operations Center Tier II Analyst

Sentry Insurance Agency•Stevens Point, WI

3d•Hybrid

About The Position

As a Security Operations Tier 2 Analyst, you'll investigate, resolve, and report on escalated security events to protect the organization from potential threats. You'll consult and collaborate with senior team members regarding complex security alerts, escalating the alert if appropriate. You will serve as an escalation point in the event of a cybersecurity incident. You will also maintain security playbooks and incident resolution procedures to ensure accuracy and consistency in the handling of security matters. You'll also lead and/or participate in complex projects within the security team. You will play a key role in the creation and analysis of metric reports to support the security program. You will also develop, implement and maintain security tools and platforms utilized by the Security Operations Center. This position will be located at our Office in Stevens Point, WI in a hybrid work model and is not a fully remote opportunity. Sentry does not offer employment in this position to holders of F-1, J-1, and H-1 Visas for the purpose of obtaining practical experience.

Requirements

Bachelors Degree in a Cybersecurity field or equivalent work experience
Minimum 2 years of related work experience

Responsibilities

Conduct thorough investigations on security alerts that are generated from various sources (SIEM, Firewall, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC) and other client data sources) to identify root causes and impacts to Sentry’s security posture.
Identify resolutions and take appropriate actions to defend the organization’s assets from potential threats.
Escalate security alerts to more senior team members for further investigation and/or resolution as appropriate.
Investigate and analyze alerts and incidents and provide the results to management while also ensuring detailed records are maintained.
Provide and implement recommendations on technology and process improvements to reduce future incidents.
Create and maintain security playbooks/runbooks and incident resolution procedures to ensure accuracy and consistency across the team in how incidents are treated.
Provide direction to less experienced team members when questions arise.
Tune security platform alerting parameters to ensure generated alerts are relevant.
Create and maintain metric reports for senior management and team members to measure program success and aid in decision making.
Analyze reports to identify concerns and share findings with management.
Manage moderately complex security-oriented projects to include the assessment, development, selection and implementation of security tools and platforms utilized by the Security Operations Center.
Participate in an on-call rotation which includes nights and weekends.
Conduct threat hunts and create comprehensive reports to support the proactive identification of security concerns.
Share findings and recommendations with senior team members.
Maintain knowledge of and actively works to uphold the company’s security goals, policies, and standards.
Operationalize current threat intelligence for the protection of Sentry infrastructure.
Conduct interviews of Sentry associates to gain clarity regarding security incidents with which they may have been involved.
Perform other job-related duties as assigned from time to time.