Staff Cyber Technical Specialist

#bringyourflavor

#LI-MF1

What you will be doing
You will join a Security Operations / Incident Response team, where you will use your knowledge of industry best practices, good judgment, and problem-solving skills to execute security operations and incident response within Albertsons Companies. You will also document process and procedures and be in a support role for requests coming into the team making sure departmental SLAs are met. This position is part of Albertsons Companies 24/7 Security Operations Center and may involve shift work including day, evening and weekend roles.

The position will be based out of our Pleasanton, CA corporate office.

The position will be based in Pleasanton, California

Main responsibilities

• Perform log analysis and correlate disparate datasets to identify abnormal behavior.
• Respond to security events, driving issues to closure, and engaging all appropriate resources.
• Document Security process and procedures.
• Support service request in-take process and communicate back to requestors promptly.
• Provide enforcement of security policies, standards and procedures.
• Knowing the latest on security technologies, trends, standards and best practices.
• Participate Incident Response activities.
• Detecting, and analyzing cybersecurity threats.
• Working with our MSSP, responding to internal and external cyber security events.
• Ensure quality service delivery to internal customers across current and future capabilities including SIEM, Triage/Investigate/Response, Phishing Email Analysis and Response, Threat Detection Development.

• Ensure service incidents are closed within SLA and service metrics (SLAs/KRIs/KPIs) are met.
• Interface with our Cyber Threat Intelligence (CTI) team on detection development and new / upcoming threats.
• Other duties and responsibilities as assigned.

A copy of the full job description can be made available to you.

**The salary range is $ 131,600 to $ 171,080 annually. Starting salary will vary based on criteria such as location, experience, and qualifications. There may be flexibility for exceptional candidates."

What we are searching for

• Bachelor's degree/specialized training/relevant professional qualification.
• 7+ years of solid knowledge and understanding of information technology systems and process.
• Prior experience with:

• IT Service Management. Especially around the delivery of security services.
• Enterprise SOC operations, or Network Operations Center.
• Security operations technologies including SIEM, EDR, Cyber Threat Intelligence, Adversary Hunting, and Security Orchestration (SOAR) or other applicable experience.
• Comfortable participating in Incident Response Investigations, Incident Response Plan execution.
• Performing appropriate forensic procedures to capture and preserve evidence for future use and analysis in a manner that allows for appropriate chain of custody.
• Writing detection rules, firewall rules, or any other similar detection capability.
• Windows Server/Workstation and Mac OS is required.
• Antivirus, anti-malware and proxy solutions.

• Understanding of current attack tools, tactics, procedures, and how to detect and/or mitigate them

• Knowledge of information security principles and practice.
• A sound understanding of the OSI networking model.
• Working knowledge of networking protocols.
• Proven analytical, problem solving and troubleshooting skills.
• The ability to learn and apply new concepts quickly.
• Comfortable with working with other internal or external organizations regarding security policy and standards violations, security controls failure and incident response situations.
• Ability to balance and prioritize work.
Must be trustworthy in keeping sensitive data confidential.