R-00173461 Attack Sensing & Warning Analyst (AS&W Analyst)

What you'll do

• Utilize EDR, SIEM, and network security tools to monitor and investigate endpoint and network activity.
• Triage alerts and determine the nature of activities on customer networks, systems, servers, and mobile devices.
• Analyze logs and attacker behaviors to identify APT tactics and aggregate indicators of compromise (IOCs).
• Develop security content, scripts, and tools to enhance detection and incident response capabilities.
• Create detailed reports for customer leadership on a daily, weekly, and monthly basis.

What we're looking for

• 5+ years of professional experience in incident detection, response, and remediation.
• Extensive experience in email security, digital media forensics, monitoring and detection, incident response, vulnerability assessment, and cyber intelligence analysis.
• Ability to analyze complex data sources, provide guidance on cyber threat operations, and mentor junior staff.
• Strong problem-solving skills with an analytic mindset for identifying root causes of issues.
• Possession of at least one relevant cybersecurity certification such as CompTIA CySA+, CISSP, or others listed.