Sr. IT Security Analyst

Role Overview

The Senior IT Security Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets.

Key Responsibilities

• Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact.

• Threat Hunting: Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence.

• Monitoring & Detection: Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions.

• Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures.

• Mentorship: Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team.

• Process Improvement: Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook.

• Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.

Required Qualifications

• Experience: Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics.

• Technical Skills:

o Proficiency with SIEM platforms (e.g., Splunk).

o Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis.

o Familiarity with malware analysis and reverse engineering techniques.

• Analytical Skills: Exceptional problem-solving abilities and a high attention to detail.

• Communication: Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.

#PFFCUBO