Cybersecurity Analyst

Description

At CyberMaxx, we believe it is our duty to defend against those committed to wide-scale societal disruption through cyberattacks.

We help our customers reduce risk by tightly integrating MDR with offensive security, threat hunting, security research, and digital forensics and incident response (DFIR) to continually adapt to new and evolving threats. Our modern MDR (Managed Detection & Response) approach is tailored to the unique characteristics and risk factors of each customer, enabling us to take full ownership of the response process and, optionally, manage key security controls. By thinking like an adversary and defending like a guardian, we help our customers stay a step ahead of threat actors.

At CyberMaxx, we value humility, transparency, intellectual curiosity, and a customer first approach.

We’re looking for a Cyber Security Analyst to act as a trusted technical advisor to our clients and an escalation point within the SOC. This role investigates and resolves escalated security events, helps clients strengthen their security posture, and drives continuous improvement in our detection, documentation, and processes.

Position Summary:

• Investigate and triage alerts from SIEM, EDR, and other detection tools, and act as the initial escalation point for complex or sensitive work.
• Respond to security tickets escalated by clients and work with them to resolve security events.
• Give clients technical recommendations to improve their security posture within the products we manage.
• Formalize and deliver security product tuning requests to improve detection capability and efficiency.
• Coordinate with internal IT and engineering teams to contain fast-moving threats such as phishing and malware.
• Coordinate basic forensics activities as needed.
• Conduct after-action reviews on high-impact and noteworthy incidents to identify process improvements.
• Develop and maintain incident response use cases, knowledge base articles, and other internal documentation.
• Engage client contacts at multiple levels of their organization to align security work with business objectives.
• Act as primary subject matter expert for one or more security products, and quickly learn related technologies.
• Identify and automate repetitive tasks.
• Proactively propose improvements that reduce risk and prevent future incidents.
• Onboard and mentor new team members, and drive collaboration, cross-training, and knowledge sharing.
• Handle reasonable out-of-hours communications, such as email and occasional SOC-related phone calls, to resolve escalated issues.
• FLSA Status: Exempt/Salaried.

What it takes to be successful:

• 18+ months of experience performing similar duties.
• Bachelor’s degree in a related field and/or equivalent work experience.
• One or more intermediate-level security certifications.
• Proficiency with three or more of the following: application, stateful, or UTM firewalls; SIEM; DLP; web content filtering; web application firewalls (WAF); vulnerability scanning and penetration testing; IDS/IPS; SOC operations; wireless networking; Linux/UNIX and Windows Server operating systems; endpoint and malware protection.
• Working knowledge of Microsoft Active Directory.
• Ability to analyze logs from Windows (including Event IDs), IIS, SQL, firewalls, IDS/IPS, web, and mail sources.
• Understanding of network protocols and port ranges (well-known, registered, and dynamic), common network attack patterns, and troubleshooting of network devices.
• Familiarity with VMware and virtualized server platforms.
• Ability to analyze and resolve complex technical and business problems, weigh many variables, and manage multiple tasks at once.

Universal Requirements:

• Ability to work all schedules in a 24/7 SOC Environment. Schedules are Sun-Wed and Wed-Sat with the following shifts: 7AM-5:30PM ET, 11AM-9:30PM ET, 9PM-7:30AM ET. Schedules are determined based on client demands at the completion of training.
• Ability to work in an operational/shift-based environment with flexible working hours to include evenings and weekends.
• Demonstrated experience in the security industry, including an understanding of best practices and risk mitigation.
• Able to function effectively in high-stakes, high-stress situations.
• Legally able to work in the US, EU, or APAC regions as designated.
• Passionate about cybersecurity and self-driven to keep developing relevant skills and maintain industry certifications.
• Ability to quickly find answers using manuals and internet resources.
• Fluent written and spoken English, with the ability to explain complex security concepts to clients and all levels of management.

Preferred:

• CISSP or GIAC certification.
• Network certifications such as CCNA or CCNP.
• Other industry certifications such as ITIL, Microsoft, Juniper, or Check Point.

Some Of What We Offer

• Flexible Paid Time Off
• 401k with a company match
• Medical, Dental and Vision Coverage
• Voluntary Short Term and Long Term Disability
• Employee Assistance Program with Mental Health Supplement
• Voluntary Basic, Accidental, and other ancillary life insurance
• Health Savings Account Contribution (with selection of a HDHP)
• 10 annual, paid holidays

CyberMaxx will consider all qualified applicants without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, disability, veteran or military status, age, genetic information, or other characteristics protected by federal, state, or local applicable law.

Salary Description

$70,000 - 80,000