Security Analyst ( Cyber Security Response Engineer) - Indus Valley Consultants
Novi, MI
About the Job
Work Location: Detroit, MI or Charlotte, NC (Hybrid - will consider remote for the right candidate)
Job Responsibilities:
Develop advanced security alerts for SOC consumption
Identify automation opportunities leveraging a SOAR tool to optimize SOC processes
Coordinate with different teams to complete agile project objectives
Generate reports around security events and metrics
Provide support for incident response investigations
Utilize attack simulations to test or Client alerting conditions
Participate in Threat Hunting exercises
Qualifications:
Working knowledge of the incident response lifecycle and MITRE Telecommunication&CK Framework
Familiar with various security platforms and tools, such as firewall, proxy, SIEM, and SOAR
Experienced with use case development lifecycle and risk based alerting mechanisms
Ability to analyze large data sets to identify trends and anomalies indicative of malicious activity
Ability to interact with personnel at all levels across the organization and to comprehend business imperatives
Ability to thrive in a fast-paced environment and capable of working under pressure with little direction
Experienced with investigations into common attack scenarios, such as phishing and credential validation attacks
Experienced at performing complex security investigations and root cause analysis
Familiar with cloud platforms, such as AWS and Azure, and their corresponding security toolsets
Well organized and comfortable prioritizing a wide variety of goals and objectives by risk
Thrives in team environment involving a diverse set of skills and personalities
Maintaining awareness of the cyber threat landscape
Practical understanding of network protocols and operating systems
Broad understanding of security mitigation solutions at all layers
Minimum of four years information security specific experience
Bachelor\'s degree in information systems or equivalent experience
Security+ or CYSA+ certification preferred
Self-driven and motivated with a strong passion for cybersecurity
Excellent verbal and written communications skills
Excellent problem solving and troubleshooting skills with a strong attention to detail
Job Responsibilities:
Develop advanced security alerts for SOC consumption
Identify automation opportunities leveraging a SOAR tool to optimize SOC processes
Coordinate with different teams to complete agile project objectives
Generate reports around security events and metrics
Provide support for incident response investigations
Utilize attack simulations to test or Client alerting conditions
Participate in Threat Hunting exercises
Qualifications:
Working knowledge of the incident response lifecycle and MITRE Telecommunication&CK Framework
Familiar with various security platforms and tools, such as firewall, proxy, SIEM, and SOAR
Experienced with use case development lifecycle and risk based alerting mechanisms
Ability to analyze large data sets to identify trends and anomalies indicative of malicious activity
Ability to interact with personnel at all levels across the organization and to comprehend business imperatives
Ability to thrive in a fast-paced environment and capable of working under pressure with little direction
Experienced with investigations into common attack scenarios, such as phishing and credential validation attacks
Experienced at performing complex security investigations and root cause analysis
Familiar with cloud platforms, such as AWS and Azure, and their corresponding security toolsets
Well organized and comfortable prioritizing a wide variety of goals and objectives by risk
Thrives in team environment involving a diverse set of skills and personalities
Maintaining awareness of the cyber threat landscape
Practical understanding of network protocols and operating systems
Broad understanding of security mitigation solutions at all layers
Minimum of four years information security specific experience
Bachelor\'s degree in information systems or equivalent experience
Security+ or CYSA+ certification preferred
Self-driven and motivated with a strong passion for cybersecurity
Excellent verbal and written communications skills
Excellent problem solving and troubleshooting skills with a strong attention to detail
Source : Indus Valley Consultants