Security Analyst III

Uniti is a premier insurgent fiber provider dedicated to enabling mission-critical connectivity across the United States.

With a steadfast commitment to customer service, operational excellence, and superior network capabilities, Uniti builds, operates and delivers critical fiber-based communications services to connect and empower people and businesses.

_________________________________________________________


About the Role:
The Security Analyst III performs third-tier incident response, analysis, as well as proactive research, data mining, baselining, and profiling to support development and refinement of Infrastructure, Architecture, SIEM, and other monitoring, alerting, and information management services.

What You'll Do:
• Provide a third (and last) tier escalation point for customer-impacting security event analysis and investigation, assisting other Analysts with prompt, effective resolution of issues.
• Follow established identity assurance and access control procedures to guarantee the confidentiality and integrity of our customers’ sensitive data.
• Maintain currency and fluency in news, events, technologies, platforms, tools, and concepts across all domains of Information Security, and of how these things impact Uniti, the CSOC, and its customers.
• Develop and implement both reactive and proactive research activities—as well as tools and techniques—to leverage production-scale volumes of security event data to extend and refine existing SIEM content, network baselines, detection protocols, mitigation activities, and response methodologies.
• Work in concert with CSOC’s Senior Engineer to assure that log collection, event correlation, attack detection, and mitigation/response tools, techniques, and methodologies are effectively and efficiently maintained and implemented and keep pace with the constantly-evolving threat landscape.
• Maintain currency in CSOC and Uniti product and service offerings, as well as support objectives and requirements thereof.
• Provide on-call presence to ensure continuity of operations outside of normal business hours.
• Address technical issues, event analysis, and deep investigations escalated from junior Analysts and Engineers, synthesizing internal and external resources as needed to reach resolution.
• Collect, assess, and integrate new and developing security news and threat and vulnerability data from sources across the professional sphere, using this intelligence to continually develop and refine CSOC’s technology, process, and policy for the good of our customers.
• Proactively analyze and creatively model existing event data to detect new threats or compromises, to develop new or improved baselines and detection heuristics, and to establish and refine baselines and behavioral forecasts to support continual improvement of existing detection, mitigation, and response patterns.
• Work closely with the Senior Engineer and CSOC Leadership to suggest and implement technical changes, process improvements, and content/asset enhancements based on research and experimental findings.
• Coordinate with Engineers, and vendor entities as appropriate to identify, isolate, and remediate workflow-impacting and/or service-impacting issues as they arise and, where appropriate, participate in the preparation of work procedures to remedy.
• Collect and analyze operational data and develop procedural documentation in response to business needs or to address emergent technical or security issues.
• Rigorously and accurately document all work carried out in response to customer issues to assure consistency, transparency, validity, and auditability of all troubleshooting efforts undertaken.

Work Complexity:
The Security Analyst III will be tasked with a complex and diverse array of responsibilities across a number of skill domains. Effective discharge of his/her responsibilities will require:

- An advanced-to-expert knowledge and comfort level across all areas of data networking, from carrier-level distribution to common LAN service deployment patterns
- Exceptional familiarity with the deployment, configuration, and troubleshooting of perimeter security appliances and security event monitoring services/products into diverse data environments in a secure, compliant, and maintainable manner
- Effective project management and general leadership capabilities, with the ability to carry out long-range and open-ended initiatives with minimal oversight, to engage diverse resources inside and outside of Uniti as needed, and to serve in all interactions as an exemplar of Uniti’s and of CSOC’s core principles of professionalism and service.
- The ability to prioritize and multitask deeply across several problem domains with competing and frequently changing requirements and deadlines;
- The ability to swiftly and e