Cybersecurity Analyst Associate

About the Role

We are actively seeking an Associate Cybersecurity Analyst to join our Cybersecurity Operations Center in Greensboro, NC. This position follows a standard Monday through Friday, 2:00 PM to 10:00 PM shift.

Key Responsibilities

• Analyze data, carry out alert and incident response processes, and conduct in-depth analysis of network and endpoint data.
• Incorporate threat intelligence to enhance detection and mitigation strategies.
• Complete Cyber Monitoring and Incident Response Operations Playbook/Checklist activities, including:
• Log review
• Vulnerability management activities
• Management report scheduling and running
• Alert analysis
• Filter modifications
• Escalation follow-up activity status
• Monitor CSOC alert queue and investigate detections for suspicious events.
• Develop, tune, and maintain tools to automate analysis capabilities for network-based, host-based, and log-based security event analysis.
• Create signatures, rulesets, and content analysis definitions from various intelligence sources for a variety of detection capabilities.
• Organize and maintain documentation of detection capabilities, alert definition, policy configurations, and tool rulesets.
• Maintain adherence to Cybersecurity Operations Center standards, policies, and procedures.
• Remain up-to-date on the latest security information to validate the security analysis and identification capabilities of security operations technologies.
• Participate in efforts to analyze and define security filters and rules for a variety of security parameters.

Requirements & Tech Stack

• Core Technical: Intrusion Detection, Network Traffic Analysis, Log Analysis, Rule/Signature/Content Development, programming or scripting required.
• Exhibits understanding and application of the principles of Network Security Monitoring (NSM).

Qualifications

• Bachelor’s degree in computer science or a related 4-year technical degree, or 3-6 years of relevant IT experience.
• 0-2 years of IT Security experience.
• Curious and open-minded.
• A good team player and a passion for cyber defense.

Added Bonus

• General Info Security: Intelligence-Driven Detection, Security Principles, Threat Lifecycle Management, Incident Management and Lifecycle, Platform Analysis, Forensics and Investigations, NSM, DFIR.
• Cyber SOC Process Management: Overall Process Design and SOC Threat Management, Teamwork, Collaboration and independent contributions.
• Malware Analysis experience preferred.