Cyber Security Analyst I
CyberSheath Services International LLC is a rapidly growing Security and IT Managed Services Provider primarily focused on providing Cybersecurity services to the Defense Industrial Base (DIB). We are excited to be expanding our staff due to our growth and are looking to add a Cyber Security Analyst I to our Security Operations team! CyberSheath integrates compliance and threat mitigation efforts and eliminates redundant security practices that don't improve and, in fact, may weaken an organization's security posture. Our professionals tell clients where to stop spending, where to invest, and how to take what they are already doing and integrate it in a way that delivers improved security. Job Overview The Cyber Security Analyst I will support proactive monitoring of clients' environments to detect, analyze, track, and mitigate external threats utilizing a multi-tenant security information and event management system (SIEM) and other tools used to provide managed security services. The successful candidate is well versed in numerous security technologies, understands the motivations and capabilities of Advanced Persistent Threat actors, can communicate risks, and make recommendations associated with specific security threats. Essential Responsibilities (include but are not limited to):
- Analyze, investigate, document and report on security alerts and/or potential security incidents identified in customer environments
- Process security investigation cases in a thorough, yet timely manner
- Serve as an incident coordinator for security events that require urgent response, containment, and remediation
- Generate meticulous investigative notes for all security alerts and incidents
- Provide continuous feedback on security process improvements and customer satisfaction
- Stay up-to-date on security training, certification, and emerging threats
- Make appropriate escalations on security investigations when warranted
- Ensure shift-change documentation is completed and communicated effectively
- Follow all available SOPs and escalation communication matrices
- Provide customers with meaningful and constructive security consultation during external communications.
Required Education, Experience, & Skills
- 0-3 years' experience working in a Security Operations Center (SOC) environment
- Basic understanding of query languages
- General knowledge of programming language operations
- System Networking experience or education
- Working knowledge/experience with Office 365
- Possess strong problem-solving skills
- Excellent verbal and written communication skills
- Demonstrated ability to work in a team environment and independently
- Must be a U.S. Citizen and reside within the United States or its Territories
Preferred Education, Experience, & Skills
- B.S. - Cybersecurity or equivalent
- Prior experience with Sumo Logic, Defender, Google Chronicle, and/or Azure Sentinel is a strong plus.
- Industry Security Certifications (Security+, CySA+, GSEC)
- Experience or working knowledge of industry standard SOAR/SIEM solutions
- Great organization skills to balance work priorities
- Advanced analytical and problem-solving skills
Work Environment
- CyberSheath is a fully remote organization, and this will be a work-from-home position
- The schedule for this opportunity is:
- Week One: Friday-Sunday 8:00 AM - 8:00 PM local time
- Week Two: Friday-Monday 8:00 AM - 8:00 PM local time
CyberSheath is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, national origin, age, protected veteran status, among other things, or status as a qualified individual with a disability.