Senior Security Analyst
Decisive Technologies
The primary role of the Senior Security Analyst is to support the company in its cyber security
posture and security service offerings. The Senior Security Analysts will act as the primary escalation point for security analysts regarding security investigations, advanced troubleshooting, and cyber security incidents. They will help offset daily monitoring tasks when required and will provide technical mentoring to other members of the Security Operations Team.
The Senior Security Analyst will work closely with the security engineers and the security architects to maintain the company’s security platform and product offerings. This will entail working with a variety of security tools such as Security Information and Event Management (SIEM), next generation firewalls (NGFW) and other advanced security solutions. As experience with these tool sets increases, the Senior Security Analyst may be designated as a technological backup to the security engineers and architects.
PRINCIPAL DUTIES:
- Implement and maintain security controls across the Company to align with regulatory, legal and company audit requirements.
- Provide support to the transition team in onboarding and operationalizing managed Security Clients.
- Triage and analysis of security events followed by prioritization and escalation of alerts that exceed the DCO threshold.
- Work closely with the security engineering to implement and upgrade security measures and controls.
- Work with security analysts to investigate and bring to a close security breaches and cyber security incidents.
- Participate in the on-call rotation of the Defensive Cyber Operations team.
- Provide a critical escalation point for security analysts regarding security investigations, advanced troubleshooting, and cyber security incidents.
- Develop and deploy and mature security monitoring use cases.
- Work with other business units and teams to develop and document processes
around security best practices.
REQUIREMENTS:
Training/Experience
- 3+ years of professional experience with IT Security products and services or hands-on infrastructure / troubleshooting / systems administration / networking experience in a distributed systems environment.
- Bachelor’s Degree in Computer Science, Math, or related discipline required OR equivalent work experience.
- Capable of developing systems and processes to ensure that work is completed to the relevant standards, and for setting and monitoring targets for individuals and team.
- Good leadership qualities, with the ability to review and evaluate the work of a team and individuals within it, to Motivate staff and encourage participation.
- Able to develop and maintain an ethos of teamwork, ensuring that there is mutual support within the team and respect for each others’ skills.
- Programming and scripting skills are an asset.
- Breadth of experience in the following areas with depth in one or more areas:
- Network & Infrastructure security
- Cyber transformation
- Threat detection
- Incident response
- Vulnerability assessment & management
- Security governance
- Risk and compliance
- Security Architecture
- Data protection
- Privacy
- Security Awareness
- Cloud Security
- Previous customer-facing experience as a technical resource, with exceptional oral and written communication skills, customer focus and bias for action.
- Experience managing large scale environments including escalations, incident response and problem management.
- Experience with existing cloud service offerings preferred but not required.
- IT Security Certifications like CISSP, CISM, CISA, CEH, GCIH, GCIA, OSCP, etc.
- Ability to manage multiple tasks and projects in a fast-moving environment.
- Analytical and problem-solving skills.
- Willingness to learn and improve.
- Resource must already have or be willing and able to secure secret security clearance.
PERFORMANCE GUIDELINES:
Individual Contributor Core Competencies:
- Technically Curious
- Collaborative
- Flexible
- Integrity
- Customer-Focused