Address
Form of workJob Description
Title:Security Analyst – Alert Response FLSA: Non-Exempt
Department: Security Operations Center Job Status: Full-Time
Reports To: Security Operation Center Team Leader
Security Operation Center – Security Analyst – Alert Response
Alert ResponseSecurity Analysts are the first people to review and action security alerts received from all our managed security platforms, customer reported incidents, and escalations from our managed services team members. As a Security Analyst you review, action, and communicate security alerts to clients or escalate alerts to tier 2 Security Analyst – Incident Handlers. This role is ideal for individuals looking to gain experience with high volume security alerts from endpoint detections to cloud alerts and everything in between. You will gain proficiency in using multiple security platforms, analyzing alert data, and accurately determining the criticality of alerts.
What do our Alert ResponseSecurity Analysts do?
- Review and analyze alerts from managed security platforms.
- Review and analyze phishing email submissions.
- Communicate alerts to managed security clients.
- Action alerts for managed services clients.
- Escalate high priority alerts to Tier 2 Security Analysts.
- Assist Tier 2 Security Analysts with incident response as necessary.
- Direct non-actionable alerts to the correct team / person to action.
What skills do I need to be a successful SOC Analyst?
- Patience, empathy, confidence, fastidiousness, and customer service skills. You will be working with a myriad of businesses, technologies, applications, and personalities.
- Ability to multitask in a fast-paced environment; manage multiple tickets and switch between tasks with ease.
- Ability to execute processes and procedures necessary to produce consistent results under stress.
- Ability to build rapport with customers and teammates alike.
- Skilled at defusing high-stress situations and facilitating resolution to security problems.
- Excellent communication (verbal and written) in English at all levels internally and externally.
- A strong sense of initiative and ownership over work.
- Ability to work effectively and complete assigned tasks with minimal supervision.
- Ability to work effectively within a team as well as independently.
What are the qualifications I need to have?
- High school diploma or equivalent.
- Experience in a technology field working as Help Desk Administrator, System Administrator, Network Administrator, Information Security, or similar role.
- General understanding of IT applications, processes, software, equipment, and networking.
- US/Canada Citizenship and a clean criminal record.
Would be awesome if you had…
- Prior SOC experience.
- Familiarity with malware sandbox operation.
- Familiarity with information technology tools such as Hyper-V, VMware Workstation, Docker, and CyberChef etc.
- Familiarity using the Linux command line.
- Familiarity with Microsoft Office 365, Microsoft Entra, and other Cloud service offerings.
- Understanding of, and a background working in law enforcement or criminal justice.
- Information Technology or Information Security Certifications
What is the physical work environment like?
- This position requires standing, walking, sitting, using hands, seeing, reaching, talking, and hearing. May need to occasionally lift and/or move up to 25 pounds.
- Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
We are an equal opportunity employer and invite diversity in our applicants; our differences make us stronger. We welcome and encourage applications from qualified candidates of all races, sexes, colors, religions, sexual orientations, disabilities, ages, and gender identities. Accommodations are available upon request for candidates taking part in all stages of the selection process.
remote work
