Cybersecurity Analyst II

At EMC, we’re all about working together to make an impact. As part of our team, you’ll have the opportunity to grow, contribute, and gain experience that matters. We strive to be caring leaders, close partners, and responsive experts—always supporting each other to do our best work. Join us, and let’s improve lives together.

**This position is eligible to work from home anywhere in the United States**

Develops, administers, and monitors controls for the security, integrity, and availability of enterprise systems, business information, and other sensitive information.  Evaluates information systems and collaborates with security architecture and engineering on moderately complex security-related projects. Identifies, reports, and mitigates security incidents and addresses escalations. Configures and administers moderately complex cybersecurity systems. Collaborates with security teams and other IT teams to maintain system and security compliance as detailed by the IT Security Policy and corporate policies. 

Essential Functions:

• Serves as cybersecurity operations first escalation point of contact.

• Researches and resolves escalated moderately complex cybersecurity alerts and incidents, such as phishing and malware-related incidents, utilizing cybersecurity tools, including SIEM and SOAR. 

• Escalates complex incidents to senior team members. Leads incidents response team and activities which involves meeting with Legal, IT, and other department leaders, based on security issue. 

• Plans, coordinates, and executes regular incident response preparedness, including tabletop exercises. Maintains the incident response plans

• Configures and administers moderately complex cybersecurity systems, including vulnerability management, SIEM detection and alert development, EDR detections and exclusions, SOAR playbooks, integrations and writing scripts and integrations.

• Verifies that adequate security controls and recovery requirements remain in effect as system changes are performed. 

• Performs controls testing to ensure compliance with cybersecurity controls and standards.

• Collaborates with Cybersecurity Engineers to guide enterprise system administrators on routine to moderately complex cybersecurity issues and concerns.

• Develops vendor relationships, including understanding the roadmap of current tooling and emerging technologies of existing vendors.

• Works with Cybersecurity Engineers to review and resolve requests for exceptions to security controls and policies, ensuring adequate compensating controls are in place

• Documents cybersecurity systems policies, procedures, standards, and guidelines.

• Maintains awareness of cybersecurity industry trends through research in order to provide input to manager and help drive the cybersecurity roadmap. 

• Assists Vice President-Chief Information Security Officer in developing security awareness training content for EMC. 

• Provides additional knowledge sharing across EMC through formal training and routine interactions. 

• Gathers data, provides reports, and recommends updates to cybersecurity KPI’s for manager to review and provide to higher leadership.

• Researches and recommends cybersecurity tactical and strategic metrics to manager based on request from leaders, including CISO. 

Education & Expereince:

• Bachelor’s degree in a computer related field or equivalent relevant experience

• Three years of experience in information security or related experience

• Security certifications (CySA+, CISSP, Security+, CEH) preferred

Knowledge, Skills, & Abilities:

• Strong knowledge of commonly used concepts, practices, and procedures within the field of information security

• Strong knowledge of SIEM and SOAR technologies

• Strong knowledge IPS/IDS rules and policies

• Good knowledge in one or more scripting languages, preferably Python

• Good knowledge of methods for protecting endpoints both cloud and on-premises

• Experience with vulnerability management and remediation and related security tools

• Experience with threat detection and response solutions

• Strong knowledge of enterprise system administration

• Excellent analytical and problem-solving