Blog

Job Title           :-  Security Analyst

Duration           :-  6+ Months

Location           :-  Local Virginia With DL (Hybrid)

Visa                  :-  Only USC

Interview          :-  Virtual

About this Position / Responsibilities

·         Serving as the Initial Escalation Point for all Investigations/Incidents Requiring Remediation and/or Coordination

·         Continuous Monitoring of the Alert Queue

·         Responding to Security Incidents with Strict Adherence to Codified Triage Process and Procedures

·         Performing Basic Event Correlation and Validation Activities

·         Performing Identification of Effected Systems, Networks and Data

·         Engaging with Network Operations to Refine Contextual Understanding of Incidents as Appropriate

·         Escalating Incidents In Accordance with Established Policies and Procedures

·         Monitoring and Enforcing all Response SLAs

·         Identifying and Documenting Any Security Risk Associated with Security Operations/Engineering

·         Documenting Recommendations for Automation and Innovation

·         Initial Analysis of Security Events, Network Traffic, and Logs.

·         Monitoring Security Sensor Activity and Associated Logs to Identify Anomalies and Intrusions

·         Network Incident First Responder for Reviewing and Verifying System Alerts/Events/Messages/Status/Availability

·         Identifying Issues with Incident Response Plans, Worflows, SOPs, KBAs, etc.

·         Creation of Shift Turnover Documentation and Products

·         Serving as Entry Point to Security Operations; Log all Requests, RFIs, Calls, etc and Work Through to Customer Satisfaction. Add to Turnover as Required.

·         Creating Reports/Briefs/AARs/etc as Required

·         Joining all IT Operations Generated Bridge Calls

·         Thinking Critically and Creatively While Analyzing Security Events, Network Traffic, Events and Logs.

·         Incident Response Coordination: Work with Affected Customers to Gather Incident Information, Assess Mission Impact.

·         Countermeasure Implementation: In support of IR Actions, Create Options for Isolate and Block Threat Actor Presence.

·         Daily Standup Meeting with SecOps

·         Creating and updating Incident, Request, and Work Orders daily

·         Performs Final Quality Assurance Checks and Closes Tickets with High Degree of Scrutiny

·         Responsible for Daily Block list peer review tasks

Qualification

·         5 years’ related experience in security operations

·         Bachelor’s degree or 7 years of hands-on security work experience

·         US Citizenship required

·         2 years of experience with Splunk SIEM application

Thanks & Regards

Aman Mishra |Sr. Technical Recruiter

Desk : 215-258-8939

First Ring Solutions LLC