Sr Threat Analyst

Location: Hershey, PA (Hybrid)

Position Title: Sr. Threat Analyst

 

Description:

 

The Senior Threats Analyst supports and matures services (technology and processes) that enable the threat management program. Services include, but are not limited to, threat intelligence, threat hunting, threat detection, threat deception, and threat validation. The Analyst engages with management, peers, and stakeholders, to ensure the quality of the services. The Analyst ensures that services are aligned with overall threat management strategies and business objectives.

 

Responsibilities:

 

• Support, Test, and Improve threat management services.
• Collaborate and communicate with stakeholders, peers, and partners. Establish relationships. Provide feedback and support. Assess and recommend mitigations against threats.
• Understand and utilize developments in threats and threat management. Utilize best practices and frameworks. Investigate and recommend appropriate emerging technologies. Participate in intelligence, hunting, detection, deception, response, and validation activities.
• Develop relationships with specialists for career and business growth and to ensure timely and accurate services.
• Develop and deliver regular metrics and reports to management and stakeholders on the state of the services, including performance and availability.
• Assess process, and technology capabilities.

 

Requirements:

 

• Knowledge of threat management technologies.
• Ability to work with a team
• Good communication skills
• Good analytical and problem-solving skills
• Ability to work in a fast-paced, dynamic environment and manage multiple tasks
• Experience with programming languages such as Python or PowerShell • Experience with threat intelligence platforms such as MISP or Anomali
• Experience with threat hunting tools such as Splunk or Elastic • Experience with threat detection systems such as Splunk, Crowdstrike, or Snort
• Experience with automation such as Service Now, or Phantom

 

 

Time %

Summary of major duties

1.

50

Support, test, and improve technical services, including working with peers, vendors, and partners to ensure timely and accurate services

2.

20

Collaborate and communicate with stakeholders. Provide feedback and support

3.

10

Understand and utilize developments in threats and threat management. Participate in intelligence, hunting, detection, and validation activities

4.

10

Develop and deliver regular reports to management and stakeholders

5.

10

Review operations to ensure adherence to and management of metrics.

 

Minimum Education and Experience Requirements:

 

Education:

 

• BS in Computer Science, Information Security or related field OR equivalent work experience (4 years of experience)
  • One or more of the following certifications is preferred: CISSP, Security+, GSEC, GCIH, GCIA, or CISM