Sr. IT Security Analyst

Role Overview

The Senior IT Security Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets.

Key Responsibilities

•    Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact.

•    Threat Hunting: Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence.

•    Monitoring & Detection: Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions.

•    Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures.

•    Mentorship: Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team.

•    Process Improvement: Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook. 

•    Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.

Required Qualifications

•    Experience: Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics.

•    Technical Skills:

o    Proficiency with SIEM platforms (e.g., Splunk).

o    Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis.

o    Familiarity with malware analysis and reverse engineering techniques.

•    Analytical Skills: Exceptional problem-solving abilities and a high attention to detail.

•    Communication: Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.

#PFFCUBO