Analyst, Threat Detection

Job Description:

Role Summary/Purpose:

A Level 1 Analyst participates in coverage for event monitoring and incident detection and also supports preliminary incident response where appropriate. The L1 Analyst is responsible for the initial triage of security incidents and indicators generated by the incident monitoring systems (e.g. Splunk ES). This will require personnel to look at the highest number of events, while performing the lowest level of analysis. Event Analysts continuously monitor the event queue for new alerts or incidents and are direct consumers of the JSOC configured security suite. The role determines if an event is deemed an incident and will be required to query referential information to add context to the event.

Essential Responsibilities:

• Monitors alerting tools and also handles escalated incidents from Helpdesk, Physical Security, Network Team and Customers.

• Triages alerts as they come in and action appropriately.

• Respond to common alerts in a consistent and repeatable manner from multiple alerting sources.

• Responsible for triage of a variety of alerts stemming from C2 beaconing, malware, or phishing attempts.

• Provide escalations of unknown threats to Level 2.

• Identify security events and trigger the call list / distribution list.

• Perform other duties and/or special projects as assigned

Qualifications/Requirements:

• Bachelor’s degree in computer science, Information Systems, Computer Engineering, Information Assurance, or Cyber security is preferred — in lieu of degree, High School Diploma/GED 1-3 Years minimum SOC hands on experience.

• Experienced in handling Alert i.e. SIEM/WAF/EDR/Cloud

• Possess personal and professional integrity. Individuals will be required to submit to a background examination.

• Good oral and written communication skills.

• Possess desire to solve problems logically.

Desired Characteristics:

• Ability to perform logical problem solving.

• Possess basic understanding of enterprise grade technologies including operating systems, databases, and web applications.

• Ability to read and understand basic system data including security event logs, system logs, application logs, and device logs.

• Demonstrate understanding for basic network traffic concepts (e.g. DNS, DHCP, HTTP).

• Network infrastructure knowledge (e.g. router, switch, firewall).

• Security best practices configuration knowledge.

• Experience of working in high performing teams and understand the dynamics of teamwork in a JSOC environment.

Grade/Level: 08

The salary range for this position is 75,000.00 - 120,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.

Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.

Salaries are adjusted according to market in CA, NY Metro and Seattle.

Eligibility Requirements:

• You must be 18 years or older

• You must have a high school diploma or equivalent

• You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process

• You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.

• New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles.  Once this new hire time in position requirement is met, the associate will have a minimum 6 months’ time in position before they can post for future non-exempt roles.  Employees, level 8 or greater, must have at least 18 months’ time in position before they can post.  All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don’t meet the time in position or performance expectations).

Legal authorization to work in the U.S. is required.  We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. 

Our Commitment:

When