Network Security Analyst 3

• Strong understanding of attacker tactics techniques and procedures.
• Experience analyzing logs and telemetry from SIEM EDR/XDR network security identity platforms and cloud environments.
• Proficiency in query languages and scripting used for threat hunting.
• Solid knowledge of Windows Linux and cloud operating systems including common attack vectors and persistence mechanisms.
• Proven expertise in security considerations of cloud computing: They include data breaches broken authentication hacking account hijacking malicious insiders third parties APTs data loss and DoS attacks.
• Knowledge and understanding of threat analysis and assessment of potential and current information security risk/threats and designing solutions to mitigate those threats.
• Knowledge and experience working with relevant National Institute of Standards and Technology (NIST) standards.
• Familiarity with threat intelligence sources malware analysis concepts and digital forensics fundamentals.
• Experience documenting investigations creating hunt reports and communicating technical findings to diverse audiences.
• Strong analytical problem-solving and critical-thinking skills.
• Ability to work independently while collaborating effectively within cross-functional cybersecurity teams.
• Ability to resolve complex security issues in diverse and decentralized environments; to learn communicate and teach new information and security technologies; and to communicate effectively.
• Conduct forensic investigations on cyberattacks to determine how they occurred and how they can be prevented in the future.
• Experience creating/reviewing/updating security policies and standards for the public/private/hybrid cloud contexts.

• GSEC CEH CISA CCSP
• Certification as an AWS Solutions Architect Cloud Security Certification and/or OpenStack Administrator Certification a plus. (Other cloud-related certification also a plus.)
• Experience with Endpoint Detection and Response (i.e. EndGame Crowdstrike CyberReason). Detect and respond to alerts from end point detection response tools.
• Experience with Email Threat Management (i.e. Proofpoint MimeCast Microsoft).
• Experience with SIEM engineering design/management/analysts (i.e. Splunk Rapid7 SumoLogic).
• Experience with Data Loss Protection/Cloud Access Security Brokers (i.e. Symantec Microsoft Bitglass Netskope).
• Experience with Cloud Enterprise Network Security (i.e. Cisco Umbrella Palo Alto ZScaler).
  

Key Skills
IDS,Network Support,Tcp/IP,LAN,Computer Networking,Windows,TCP,Perl,Telecommunication,Operating Systems,Juniper,Dns
Employment Type : Full Time
Experience: years
Vacancy: 1