Security Analyst
Job Summary
We are looking for an experienced Security Analyst with expertise in network security, threat intelligence, and incident resolution. The ideal candidate will have a strong understanding of SIEM, UEBA, ATP tools, and strategies to enhance security monitoring, detection, and response capabilities. This role requires a deep understanding of network designs and components to identify and mitigate vulnerabilities effectively.Key Responsabilities
- Analyze and secure network designs and components to ensure resilience agaisnt cyber threats.
- Manage and optimize Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA) solutions.
- Deploy and maintain Advanced Threat Protection (ATP) tools and strategies to detect and respond to threats.
- Lead security incident response efforts, including threat containment, eradication, and forensic analysis.
- Develop and refine threat detection use cases, correlation rules, and alerting mechanisms.
- Collaborate with cross-functional teams to implement security best practices and risk mitigation strategies.
- Perform security assessments, vulnerability scans, and penetration testing to identify and remediate risks.
- Document security incidents, investigations, and lessons learned to continuously improve security posture.
Required Qualifications
- Strong understanding of enterprise network designs and security components (firewalls, IDS/IPS, VPNs, etc.).
- Hands-on experience with SIEM and UEBA tools (e.g., Splunk, Microsoft Sentinel, IBM QRadar, Exabeam)
- Expertise in Advanced Threat Protection (ATP) tools and strategies (e.g., Microsoft Defender ATP, CrowdStrike, Palo Alto Cortex).
- Proven experience in security incident resolutions, including threat hunting and forensic analysis.
- Familiarity with SOC operations, security frameworks (MITRE ATT&CK, NIST, ISO 27001), and compliance standards.
- Strong analytical and problem-solving skills with the ability to assess complex security issues.
- Relevant certifications (e.g., CISSP, CEH, GCIA, GCIH, OSCP) are a plus.
Preferred Qualifications:
- Experience with cloud security solutions (AWS, Azure, Google Cloud).
- Knowledge of automated threat response and SOAR platforms.
- Experience with endpoint detection and response (EDR/XDR) technologies.
Why Join SoftwareCraft
- Competitive monthly payment.
- Work with a team of top-tier security professionals in a dynamic and innovative environment.
- Hands-on experience with cutting-edge cybersecurity technologies.
- Opportunities for professional growth.
“We are a Nearshore staff augmentation firm specializing in building top notch Software Engineering teams for clients in the United States. Our mission is to help businesses streamline their operations and improve efficiency through cutting-edge technology.”