Security Analyst

Responsibilities:

• Develop detection rules to support our SOC's alerting and response capabilities.
• Provide expert analytic investigative support to analysts for complex security incidents.
• Implement and execute administrative, management, and lifecycle procedures for the SIEM.
• Review security control measures, identify gaps in the security architecture, and implement improvements or enhancements as needed.
• Implement email security standards such as DKIM, SPF, and DMARC.
• Demonstrate experience with deploying and operating network security tools, including but not limited to antivirus, IDS, firewalls, proxies, and security gateways.
• Evaluate system security configurations to ensure efficacy and compliance with policies and procedures.
• Research and investigate the potential impact of new threats and exploits and recommend solutions to management.
• Provide guidance on risks, vulnerabilities, or potential vulnerabilities within the architecture.
• Deploy, configure, and maintain Data Loss Prevention (DLP) tools and solutions across enterprise systems.
• Automate administrative tasks, reporting, and data processing using Python scripts and applications.

Requirements:

• Excellent communication skills, both written and verbal, including the capacity to communicate complex and technical issues.
• Certification: CEH, CISSP

Skills

CrowdStrike, DLP, SIEM, SOAR, Zscaler