Security Analyst II

Provides support to Security Services team, with a high attention to detail

• • Researches, analyzes, and documents findings
• • May influence others within the Security team through the explanation of facts, policies, and practices
• • Assists with the analysis of events generated from IDS, log-based alerts, SIEM alerting, and endpoint detection tools
• • Monitors a designated set of alerts and tickets and assists with threat analysis, resolution, and escalation as necessary
• • Monitors multiple cybersecurity systems for breaches, suspicious, or malicious activity
• • Assists with SIEM rule modification, notification pathways, and other system configuration management
• • Analyzes process workflows and identifies problems
• • Works with colleagues to understand processes and deliverables across the organization
• • Adheres to relevant policies, procedures, standards, and security practices
• • Delivers and prioritizes customers satisfaction
• • Aids and facilitates partner communications, resolutions, and escalations
• • Follows escalation procedures for interfacing with other SOC teams
• • Maintains consistent threat handling and remediation procedures
• • Utilizes the internal knowledge base to assist with resolution of threats

Mandatory Skills: Should have hands on experience to work on incidents and investigation of forensic investigation, Cyber Triage, or Velociraptor, EDR – SentinelOne , and Microsoft defender. Practical exposure particularly in log analysis and real-world incident handling,