Senior Analyst, Managed Detection & Response at Presidio in Albany, NY
Job Details Description COME BUILD YOUR FUTURE WITH PRESIDIO! We know technology is the key to success in a connected world. The innovative solutions we provide our clients can unlock possibilities that transform their business. While technology permits that connection, technology without imagination and ingenuity cannot be effective. At Presidio, we know that it's our people that make the connections happen. WHY YOU SHOULD JOIN US? You will set your career on track for outstanding achievement with a company that knows no limits. Presidio is a leading IT solutions provider focused on Digital Infrastructure, Business Analytics, Cloud, Security & Emerging solutions. THE ROLE:
Senior Analyst Role Overview Our Security Analysts are involved in highly technical investigations and support delivering meaningful, accurate results for both internal and external customers in a dependable and targeted manner. Time management and in-depth knowledge of all internal and many external products and services are imperative to success. A successful candidate will perform triage on alerts by correlating and validating evidence, contextualizing these events within the customer's network environment, understanding the extent of the threat, and coordinating response activities with customer staff in near real time. Key
Responsibilities:
Assess security information, triage and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents. Identify, triage and remediate threats based on threat intelligence as well as active analysis of system log data Assess newly published vulnerabilities and attacker tactics, technics and procedures (TTPs) to identify possible defensive measures to locate and stop threat actors Serve as escalation point and support for less experienced SOC analysts to address complex and/or unusual alerts, threats, cases, requests and/ or incidents; mentor and train junior analysts Research and stay current on Cybersecurity trends, new security tools, security standards, best practices and news Provide continuous feedback to our Product Management and Threat Detection Engineering Team to help mature and enhance investigation theory, detection logic, SOAR playbooks, and offerings to our Clients. Develop an area of specialty with the goal of becoming a subject matter expert Incident Response and threat hunting in client environments as required Required Skills:
Analytical mind with strong attention to detail and a commitment to quality. Demonstrated proficiency in network security concepts, such as security event correlation, TCP/IP concepts, DNS, firewall technologies, IPS/IDS, Endpoint protection, routers, switches, perimeter security, authentication, encryption, and VPN solutions Strong customer-facing verbal communication skills with the ability to effectively communicate complex security concepts with customers Demonstrated experience in handling escalated client issues, diffuse challenging situations confidently and deliver an optimal customer experience. Demonstrated ability to effectively interact professionally with a diverse group of people at all levels of the organization Ability to work in an operational/shift-based environment with flexible working hours to include evenings and weekends. Industry Certifications such as CompTIA Security+, CEH, CCNA CyberOps, GIAC GSEC, or others are desirable. Willingness to work a night shift - Tuesday evening - Saturday morning (10:
00 p.m. CST - 9:
00 a.m. CST) Education and
Experience:
Bachelor's Degree or equivalent work experience and/or military experience 3
years full-time experience in a Security Operations Center or similar Cyber Security Analysis role, excluding time spent on an internship or work experience program
Salary Range:
$80K -- $100K
Minimum Qualification
IT Consulting, IT SecurityEstimated Salary: $20 to $28 per hour based on qualifications.
Senior Analyst Role Overview Our Security Analysts are involved in highly technical investigations and support delivering meaningful, accurate results for both internal and external customers in a dependable and targeted manner. Time management and in-depth knowledge of all internal and many external products and services are imperative to success. A successful candidate will perform triage on alerts by correlating and validating evidence, contextualizing these events within the customer's network environment, understanding the extent of the threat, and coordinating response activities with customer staff in near real time. Key
Responsibilities:
Assess security information, triage and responding to security events, identify false positives, and conduct correlation analysis across numerous internal and external data sources while prioritizing information security incidents. Identify, triage and remediate threats based on threat intelligence as well as active analysis of system log data Assess newly published vulnerabilities and attacker tactics, technics and procedures (TTPs) to identify possible defensive measures to locate and stop threat actors Serve as escalation point and support for less experienced SOC analysts to address complex and/or unusual alerts, threats, cases, requests and/ or incidents; mentor and train junior analysts Research and stay current on Cybersecurity trends, new security tools, security standards, best practices and news Provide continuous feedback to our Product Management and Threat Detection Engineering Team to help mature and enhance investigation theory, detection logic, SOAR playbooks, and offerings to our Clients. Develop an area of specialty with the goal of becoming a subject matter expert Incident Response and threat hunting in client environments as required Required Skills:
Analytical mind with strong attention to detail and a commitment to quality. Demonstrated proficiency in network security concepts, such as security event correlation, TCP/IP concepts, DNS, firewall technologies, IPS/IDS, Endpoint protection, routers, switches, perimeter security, authentication, encryption, and VPN solutions Strong customer-facing verbal communication skills with the ability to effectively communicate complex security concepts with customers Demonstrated experience in handling escalated client issues, diffuse challenging situations confidently and deliver an optimal customer experience. Demonstrated ability to effectively interact professionally with a diverse group of people at all levels of the organization Ability to work in an operational/shift-based environment with flexible working hours to include evenings and weekends. Industry Certifications such as CompTIA Security+, CEH, CCNA CyberOps, GIAC GSEC, or others are desirable. Willingness to work a night shift - Tuesday evening - Saturday morning (10:
00 p.m. CST - 9:
00 a.m. CST) Education and
Experience:
Bachelor's Degree or equivalent work experience and/or military experience 3
years full-time experience in a Security Operations Center or similar Cyber Security Analysis role, excluding time spent on an internship or work experience program
Salary Range:
$80K -- $100K
Minimum Qualification
IT Consulting, IT SecurityEstimated Salary: $20 to $28 per hour based on qualifications.
|
|
 | |
