Analyst, Security (Open to Remote)

• Defends the enterprise perimeter from malicious network activity.

• Secures internal networks and hosts against cyber threats.

• Enriches security logs, correlates events, and detects security issues.

• Performs security event analysis, triages incidents, and documents cases.

• Proactively reviews threat intelligence and conducts threat hunting.

• Assists in developing and maintaining SOC documentation.

• Participates in post-incident reviews to improve security operations.

• Supports management in creating security reports and recommendations.

• Collaborates with security engineers on SIEM rules, threat models, and playbooks.

• Participates in an on-call rotation.

• Minimum 3 years of experience as an IT professional and 1 year of experience as a Security Analyst
• Industry licenses or certifications (CC, CySA+, CTIA, Security+, GCIA, GSOC, GMON) preferred

• Experience with security tools such as firewalls, Host and Network IDS/IPS, Anti-Virus, EDR, URL Filtering Gateways, Email Filtering Gateways, DLP tools, and SIEM platforms
• Experience with threat analysis frameworks and network traffic analysis tools such as Cyber Kill Chain, MITRE ATT&CK, Diamond Model, and Pyramid of Pain

• Possesses a working understanding of advanced threat tactics, techniques, and procedures (TTPs)

• Ability to analyze threats, prioritize effectively, and work independently under pressure

• A team player with strong communication skills, including written, verbal, and presentation abilities.

• A desire for knowledge and enthusiasm for cybersecurity are advantages!

• "route" is used for session stickiness
• "careerSiteCompanyId" is used to send the request to the correct data center
• "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
• "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Penguin Random House