Cyber Security Specialist  

In this position, you will:

• Be responsible for customer and internal security updates.
• Establish effective lines of communication with the Cybersecurity Team and management to ensure cases are flagged that require immediate attention.
• Provide support for complex network environments including problem solving, ability to take ownership of unfamiliar tasks and problems and seeing through to completion.
• Take ownership of documenting incidents, maintenance and problem details in near real-time.
• Detect and analyze alarms to provide basic to moderate fault isolation and troubleshooting, escalating to Cybersecurity Specialist or management if necessary.
• Ensure SLA’s are met as per customer agreement.
• Perform security event analysis and intrusion detection (IDS/IPS Incident response – triage, incident analysis, remediation).
• Provide first level technical resolution for security alerts and SOC service requests.
• Escalate first level security alerts to second tier Cybersecurity Specialist.
• Demonstrate problem solving skills that contribute towards the resolution of any issues that arise. Document solutions, processes, or procedures and present them in writing, verbally on the phone or in person.
• Utilize discretion and independent judgment in investigating and resolving matters of significance on behalf of management pertaining to customer security alerts and events

  The SOC Cybersecurity Command Center Analyst will play a pivotal role in ensuring that Dataprise is seen as a key security partner in the successful operation of customers’ IT environments. This exciting position is one that will wear many hats and is an excellent opportunity for someone who wants to break into the Cybersecurity space.

  In this position, you will:

• Be responsible for customer and internal security updates.
• Establish effective lines of communication with the Cybersecurity Specialist team and management to ensure cases are flagged that require immediate attention.
• Provide support for complex network environments including problem solving, ability to take ownership of unfamiliar tasks and problems and seeing through to completion.
• Take ownership of documenting incidents, maintenance and problem details in near real-time.
• Detect and analyze alarms to provide basic to moderate fault isolation and troubleshooting, escalating to Cybersecurity Specialist or management if necessary.
• Ensure SLA’s are met as per customer agreement.
• Perform security event analysis and intrusion detection (IDS/IPS Incident response – triage, incident analysis, remediation).
• Provide first level technical resolution for security alerts and SOC service requests.
• Escalate first level security alerts to second tier SOC Analysts.
• Demonstrate problem solving skills that contribute towards the resolution of any issues that arise. Document solutions, processes, or procedures and present them in writing, verbally on the phone or in person.
• Utilize discretion and independent judgment in investigating and resolving matters of significance on behalf of management pertaining to customer security alerts and events

Who are you and what makes you qualified?:

• You have a few years of industry related information security experience directly related to position requirements. You are highly analytically and have strong problem-solving skills.
• You are an excellent communicator and can produce accurate communications in time sensitive situations.
• You are able to work independently with minimum supervision and can take on additional tasks as required, prioritizing well and working within a small team to solve complex problems. You follow-through and take the initiative to stay with issues until they are resolved.
• You are disciplined and tenacious when it comes to meeting deadlines.
• You are very organized and have a strong attention to detail.  You are responsive, proactive, and own tasks from start to finish.
• You have previous knowledge or a strong desire to learn about crisis management issues.
• You are willing and able to be on-call and perform afterhours work as needed.

Ideal Candidates will also have:

• 24x7 NOC/SOC experience, working for a MSSP, or internal enterprise small SOC teams.
• Experience with SIEM/IDS technologies such as; Splunk, ELK, LogRhythm, Intel Security, HP Arcsight, AlienVault USM, IBM QRadar.
• Knowledge of common methods of exploitation, such as buffer overflows, cross-site scripting, etc and have done incident response work.
• A Bachelor’s degree in Computer Science, Cybersecurity, or other tech-related degrees.
• One or all of the following certifications: CompTIA Network+, Security+, CSA+, Cisco CCNA Cyber Ops, GIAC GSEC.
• Strong analytical and planning skills;
• Good communication and presentation skills;
• Excellent problem-solving skills;