Cybersecurity Incident Response Team Security Analyst II

Description

The company is a global provider of engineering, supply chain and manufacturing solutions for major brands, with more than 60 years in business and over 100 sites worldwide.

This is an on-site role in St. Petersburg, FL. Candidates must be U.S. citizens.

The role monitors and reports on security events, administers security tools and devices to keep them working properly, and runs investigations that supply the data needed for incident response.

Responsibilities

• Support 24/7 global operations by responding to security events in the environment, with on-call duty as needed.
• Monitor security events in depth by studying and reviewing device security logs.
• Investigate events by correlating data from several sources to judge the risk to the company.
• Carry out advanced incident analysis using logs and monitoring activity.
• Help with large-scale security incidents, including investigation and response, and advise on remediation.
• Build and improve log monitoring reports, searches and basic investigative tools.
• Take over escalations from SOC Security Analysts I.
• Analyse the environment through port scans, activity monitoring and intrusion detection.
• Run intermediate health checks and routine administration on security tools.
• Decide whether an event is a security event or a full incident, and start the right response.
• Take part in IT security and customer audits.
• Mentor and train other security staff.
• Drive continuous improvement through trend analysis and metrics management.
• Keep procedures and work instructions efficient and free of duplication.
• Find and introduce new analytical methods for detecting threats.
• Solve problems quickly and well so customer expectations are met.
• Keep all security work confidential, whether internal or customer-specific.
• Follow instructions given in writing, orally, as diagrams or as schedules.
• Lead small projects or initiatives when assigned.
• Perform other duties as assigned.

Requirements

• Define problems, gather data, establish facts and reach sound conclusions.
• Communicate analytical findings clearly to varied audiences, including executives.
• Build credibility as a peer through strong interpersonal and leadership skills.
• Work well under heavy enterprise-wide pressure and act with urgency.
• Hold a bachelor's degree in computer science, information systems or a related field, or have 3-5 years in security operations, network administration or equivalent knowledge.
• Hold at least one security certification: Security+, GSEC or GCIH.
• Have strong working knowledge of perimeter technologies such as firewalls and proxies.
• Have strong working knowledge of security tools such as SIEM, NetFlow, IDS/IPS, endpoint solutions and DLP.
• Have strong working knowledge of networking, including TCP/IP, network architecture, packet capture and analysis.
• Have advanced technical knowledge of operating systems, network services, applications and security logging.
• Preferred: a master's degree in information security, cybersecurity or computer network defense.
• Preferred: additional security certifications such as GCIA, GCED, GMON, CEH, CCNA or CySA+.
• Preferred: experience with scripting or programming, such as Python, PowerShell, PERL or Splunk SPL.
• Preferred: direct experience on an enterprise-level Cyber Incident Response Team or Security Operations Center.

Conditions

On-site in St. Petersburg, FL.

U.S. citizenship required.

On-call duty as required.

Equal opportunity employer.