Cyber Security Analyst-Onsite in Houston,TX

To Apply for this Job Click Here

NOTE: This is an onsite position in Houston, TX

One of our clients in Houston, Texas is looking for a Cyber Security Analyst with the following skills and experience:

Job Description:

We are looking for a highly skilled Cyber Security Analyst to join our Security Operations Center (SOC) team. The ideal candidate will have extensive experience in information security, cybersecurity, and threat analysis within medium to large-sized organizations. This role involves actively monitoring, analyzing, and responding to security threats to ensure the safety and integrity of our information systems.

Responsibilities:

• Monitor security alerts and events using Splunk and other security tools.
• Conduct thorough threat analysis and utilize threat intelligence to identify potential security threats.
• Perform incident response activities, investigating and mitigating security incidents.
• Use Endpoint Detection & Response (EDR) and Intrusion Detection & Prevention (IDP) tools, including Tanium, Trellix, TippingPoint, and Palo Alto.
• Analyze security alerts from various platforms including phishing emails, Azure logins, Palo Alto alerts, and Cloudflare alerts.
• Collaborate with L1 security analysts on initial investigations and provide guidance for escalations.
• Escalate unresolved incidents to L3 security analysts when necessary.
• Work closely with cross-functional teams such as engineering, networking, and operational technology (OT) to address and resolve security issues.
• Maintain up-to-date knowledge of the latest security threats, tools, and best practices.
• Document and communicate security incidents, remediation efforts, and threat intelligence reports.

Requirements:

• Minimum of 5 years of experience in information security, cybersecurity, or related fields within a medium to large-sized organization.
• At least 5 years of experience working in a Security Operations Center (SOC), focusing on threat analysis and threat intelligence collection techniques.
• Bachelor's Degree in Information Technology, Computer Science, or equivalent military experience.
• Proven experience in incident response, handling security incidents from detection to remediation.
• Expertise in using Endpoint Detection & Response (EDR) and Intrusion Detection & Prevention (IDP) tools such as Tanium, Trellix, TippingPoint, and Palo Alto.
• Extensive experience with Splunk as a primary Security Information and Event Management (SIEM) tool.
• Familiarity with additional security tools including Crowdstrike, Microsoft Defender, Cloudflare, and Tenable.
• Basic knowledge of Active Directory (AD) for identity management and access control.
• Scripting experience with PowerShell is a plus but not mandatory.

Technical Skillset:

• Splunk: Proficient in using Splunk for security information and event management.
• Incident Response: Experienced in responding to security incidents and performing in-depth investigations.
• EDR and IDP Tools: Skilled in using Tanium, Trellix, TippingPoint, and Palo Alto for endpoint detection and intrusion prevention.
• Additional Tools: Exposure to Crowdstrike, Microsoft Defender, Cloudflare, and Tenable for a comprehensive security strategy.
• Active Directory (AD): Basic knowledge to manage identities and access control.
• Scripting: Familiarity with PowerShell scripting is advantageous.

Day-to-Day Activities:

• Continuously monitor and analyze security alerts from various sources using Splunk.
• Assist L1 analysts in initial threat investigations and provide support for escalated issues.
• Conduct thorough incident response activities, documenting findings and remediation actions.
• Collaborate with other teams to ensure effective resolution of security incidents.
• Escalate complex security issues to L3 analysts as necessary.
• Keep abreast of the latest security trends, tools, and best practices to enhance the organization's security posture.

Interested candidates may submit their resumes online or call at 310-###-#### for further information regarding the position.

NS-CASE-NS_171#######

To Apply for this Job Click Here