SOC Insider Threat Analyst (AVP) 24760720

• The analyst will perform monitoring, research, assessment and analysis on alerts from various security tools, including firewalls, antivirus systems, user behavior analytics tools, proxy devices and SIEM tools, etc. which requires demonstrable security incident response and/or insider threat experience.
• Recommend and review new use cases for insider threat monitoring
• Follow pre-defined actions to investigate security incidents or perform incident response actions, including escalating to other support groups.
• Execute daily ad hoc tasks or lead projects as needed.
• Participate in or lead daily and ad-hoc conference calls; Create, update or provide process documentation, or provide requested evidence for compliance & controls requests.

Experience required:

• You have 4+ years working in the security & operations fields
• You have a Bachelor’s degree or higher (Computer Science or Cybersecurity preferred) or equivalent work experience
• Excellent knowledge of network security, TCP/IP, various operating systems (Windows/UNIX), and web technologies (focusing on Internet security).
• Ability to read and understand packet level data; Experience with user behavior analytics, DLP, IDS/IPS, firewalls, and host security products (HIPS, AV, EDR, etc)
• Certifications from EC-Council, GIAC, or (ISC)² are preferred [CISSP, C|EH, GCIA, CCNA].
• You have good communication skills with the ability to articulate clearly in high stress situations
• You enjoy learning and love sharing your knowledge with others
• You work independently and are self-directed
• You are a detail oriented and perseverant individual
• You have a positive attitude with the drive to get the work done
• You are a self-starter with good problem solving skills, and you continuously look for ways to improve things.
• You understand the importance of prioritization of your work.
• You have skills and proficiency with MS PowerPoint, Excel, Access or other analytical tools