Lead IT Security Analyst

Duties / Responsibilities:

1. Monitor, identify alerts and threats, and respond to mitigate any identified risks.
2. Develop a reliable working procedure to enable the company’s response to security events accurately and in a timely manner.
3. Manage Security Operations team.
4. Identify and report all security issues, prioritize threats, monitor Threat Intelligence Feeds, and validate threat mitigation in accordance with company standards.
5. Develop procedures and rulebooks to identify, investigate and manage security events and reporting.
6. Collaborate cross functionally to understand the architecture of the company enterprise and assist with recommending appropriate solutions to complex issues.
7. Investigate and remediate alerts triggered by the Security Information and Event Monitoring System (SIEM).
8. Monitor threat intelligence feeds to identify threats, IOC, and ATP's.
9. Ensure all systems are protected per the policies and guidelines set by the Sr. Information Security Director and Chief Information Security Officer.
10. Other duties as assigned by Supervisor.

Minimum Qualifications:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.

• Bachelor’s degree in computer science or related field desired.
• 5+ years of Information Systems experience.
• 4+ years of experience directly related to incident response, malware analysis, threat hunting, or threat intelligence
• Strong problem-solving, troubleshooting, and analytical skills
• Coding/Programming scripting (JavaScript, Python, PowerShell, C++) is a plus
• GIAC SOC, CySA+, CASP+, GIAC (GCDA, GCIA, GCIH, GCED, GDAT) certification is highly desired
• Expert knowledge of vulnerability management purpose and solution such as Nessus, Rapid7, Nmap, etc.
• Proven knowledge of SIEM technology, and hands on experience on working in triaging alerts using a SIEM, participating in investigation etc.
• Broad base knowledge of range System and Network Security applications used in Security Operation
• Understanding of Application Security related vulnerabilities