Cyber Security Analyst

The Cyber Security Analyst will build a foundation across all aspects of MSS technologies. This role will help protect our customer networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data. This is accomplished by monitoring and analyzing customer networks, servers, databases and end-point equipment for key indicators of compromise and configuring customer networks and security devices such as switches, routers, wireless, firewalls and virtual private networks (VPNs).

Job Description

• Monitor the MSS helpdesk and react to new and existing tickets at a 1st line/Tier 1 level.

• Tackle all MSS tickets regardless of the technology stream the ticket focuses on.

• Respond to Security Incident and Event Management (SIEM) platform alerts by investigating and analyzing potential security breaches and cyber security incidents.

• Investigate monitoring alerts for network devices such as an interface up/down and alerting the customer appropriately.

• Monitor customer environments for security/network issues.

• Manage, monitor, and alert customer equipment.

• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.

• Document and research security breaches and assess the damage they cause.

• Work with customers security team to perform tests and uncover network vulnerabilities.

• Help remediate detected vulnerabilities to maintain a high-security standard.

• Become current on IT security trends and news.

• Adhere to company-wide best practices for IT security.

• Research security enhancements and make recommendations to management.

Required Qualifications

• Strong understanding of cybersecurity principles, network security, threat detection, and incident response.

• Ability to demonstrate an understanding of IP protocols like DHCP, FTP/SFTP, HTTPS/HTTPS, TCP/UDP, SSH etc.

• Proficiency in Cybersecurity frameworks, including but not limited to Mitre Att&ck, NIST (National Institute of Standards and Technology), and Lockhead Martin, with an ability to apply these frameworks in real-world scenarios for threat detection and mitigation.

• Strong problem-solving and analytical skills are essential for investigating security incidents and vulnerabilities.

• Previos experience working with SIEM platforms such as QRadar, Splunk or AlienVault etc.