Proactively monitors the organization for indicators of attack or compromise, suspicious network activity, and violations of regulatory compliance.
Responsible for monitoring and triaging alerts and events from LAC applications and systems.
Actively hunt for threats in the environment and configure toolsets to detect anomalies and indicators of compromise.
Evaluates events, detects threats and anomalies in the environment, and reacts to potential incidents utilizing incident response playbooks.
Performs incident analysis, investigation and response.
Conducts penetration tests in support of risk assessment/analysis activities.
Develops and maintains CDOC documentation and runbooks; conducts enterprise-wide threat hunting.
Responds to alerts and notifications from the MSSP; processes tickets to and from the MSSP and ensures they are resolved in a timely manner.
Tunes CDOC toolsets and automation engines.
Collaborates with other InfoSec and IT teams to ensure that alerts and events are received and processed by the CDOC.
Participates in the InfoSec on-call schedule and escalation process.
Provides training, recommends process improvements, and mentors junior level staff, department interns, etc. as needed.

Requirements

Bachelor's Degree
At least 6 years of direct, operational experience in comparable information security or technology teams.
Operational experience configuring and managing a Security Information and Event Management (SIEM) platform.
Experience responding to crises, incidents, and investigations.
Demonstrated experience performing threat analysis and managing security-monitoring toolsets.
Operational experience working in a regulated environment (e.g., classified networks, healthcare, finance, banking, etc.).
Exceptional attention to detail executing and developing procedures in security operations center environments.
Strong understanding of networking and communication protocols (such as TCP/IP, UDP, SSL/TLS, IPSEC, HTTP/S, etc.).
Strong background in Windows Server and Linux administration.
Strong verbal and written communication skills.
Ability to collaborate with internal and external key stakeholders.

Benefits

Paid Time Off (PTO)
Tuition Reimbursement
Retirement Plans
Medical, Dental and Vision
Wellness Program
Volunteer Time Off (VTO)

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

incident responsepenetration testingthreat analysissecurity monitoringSIEMnetworking protocolsWindows Server administrationLinux administrationanomaly detectionregulatory compliance

Soft Skills

attention to detailcommunication skillscollaborationmentoringprocess improvementtrainingproblem-solvingcrisis managementteamworkleadership

Certifications

Bachelor's Degree