Cyber Security Analyst - remote job

TechBiz Global is hiring a Cyber Security Analyst. The role sits in Other jobs and is fully remote. The company places no restriction on where the candidate lives, so you can apply from anywhere.

The employer did not publish a figure; that is settled at interview. The advert sets no condition on working hours.

This vacancy passed an automated check: the list excludes any advert requiring a foreign work permit, visa sponsorship, a particular citizenship, or residence in a specific country.

TechBiz Global runs recruitment for the top clients in our portfolio. Right now we are filling a Cyber Security Analyst seat on one of those client teams. If you want a chance to develop inside an innovative setting, read on.

The client wants someone eager and self-driven to deliver Managed Cyber Security Services to its customers. You would sit inside the Optimization Engineering & Analytics team, a group whose job is shielding system resources from cyber-attacks and other online threats that could hit millions of end users hard.

Strong applicants bring a solid base in Network Security and System Administration, plus deeper command of Endpoint Protection, Threat and Vulnerability Management, Security Automation, and Security Analysis.

Requirements

KEY RESPONSIBILITIES: • Support clients directly on our managed security services, following and helping build out processes and operational frameworks. • Work your assigned shift, and cover other shifts when the team needs it. • Analyze critical information security incidents, escalate them, and help drive them to resolution. • Help onboard, integrate, deploy, and manage customers using endpoint defense and attack surface services. • Watch alerts in real time and study security event data coming from network and endpoint environments, fellow analysts, customer platforms, and other feeds. • Deliver Incident Response (IR) support and walk customers through remediation. • Go over procedures covering Cyber threat intelligence, monitoring, incident response, and attack surface reduction, then design automated actions that speed up triage, validation, eradication, and remediation of security incidents. • Apply your command of leading security operations tools and standard scripting languages to write playbooks for security orchestration, automation, and response. • Work with teammates to build, maintain, and manage a library of automated playbooks for common information security threats, and adapt those plans to each client environment. • Look for what can be improved in Security Operations Center and Cyber Incident Response processes, aiming to cut response times, raise effectiveness, remove waste, and streamline security operations. • Wire new security platform functionality into existing systems and automated processes as threats and controls change. • Produce code, scripts, process notes, and service documentation that are well documented and easy to follow. • Run health checks and optimization work on client security technologies or systems. • Judge information security risk and drive remediation of vulnerabilities and security risk found across the enterprise. • Anything else the role calls for.

MINIMUM QUALIFICATIONS • 4+ years in IT. • 3+ years in Cyber Security. • Advanced operating systems background in 2 or more of: Microsoft, MacOS, Linux. • Working knowledge of network security and troubleshooting. • Basic scripting ability, preferably in one of: PowerShell, Python, Bash. • Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP Protocols, network analysis, and network/security applications. • Sound grasp of common malware threats and attack methods. • Genuine interest in emerging threats and security tools/technologies. • Malware and Threat analysis. • Incident Management. • Comfortable operating with general to minimal supervision.

PREFERRED QUALIFICATIONS • 3+ years using endpoint security tools (Trellix ePO, Trellix ENS, Trellix EDR, Trellix HX, CrowdStrike, Microsoft Defender, Microsoft ATP, SentinelOne). • 3+ years running security endpoints. • 3+ years of SIEM management and tuning in one or more of: LogScale formerly Humio, Splunk, Trellix Helix, Trellix ESM, Azure Sentinel, Elastic SIEM, Chronical, or Devo. • Windows patch management tool experience (Automox, SCCM, SolarWinds, GFI Languard, etc.) is a bonus. • Built detection rules in one or more SIEM technologies. • Certifications are a plus: CEH, CRISC, CISA, CGEIT, CISSP, CIPP, GMON, GHIA, GCIH. • Bachelor's Degree (Math, CS, and Engineering) preferred.

• Excellent knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK framework).

Highlights

On shifts: two options, and you choose one. Sunday-Thursday, 12P-9P Tuesday-Saturday, 12P-9P

Originally posted on Himalayas