Security Operations Analyst Jobs

Security Operations Analyst

Work Location: 30-30 Thomson Avenue, Long Island City, NY .

Work Schedule: 7 hours a day (35hrs/week)

Contract Duration: 24 months

• Note: Initially onsite , then it is Hybrid mode

Minimum Qualifications

• Experience in information security, cybersecurity, or a related field.
• Minimum of 5 years of experience in IT audit, enterprise risk management, penetration testing, red team/incident response, and/or as a Midlevel security operations analyst.
• Experience with Containerization technologies and DevOps Tools Experience with regulatory compliance and information security management frameworks (such as International Organization for Standardization [IS0] 27000, COBIT, National Institute of Standards and Technology [NIST] 800) Experience with NYC agencies is preferred.

Task and Responsibilities

• Provides network subscribers with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary
• Works with security information and event management (SIEM) to manage/tune the system, create/manage the detection content and actively watch for alerts
• Works with threat intelligence and/or threat-hunting teams
• Perform security standards testing against computers before implementation to ensure security
• Correlates network, cloud, and endpoint activity across environments to identify attacks and unauthorized use
• Provides users with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary
• Supports the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results, and making changes necessary to address deficiencies
• Experience with Containerization technologies (e.g., Docker, LXC, Rocket)
• Progress adoption and maximize efficiency of DevOps tooling, including
• Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity
• Reviews alerts and data from sensors, and documents formal, technical incident reports
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources
• Deploys cloud-centric detection to detect threats related to cloud environments and services used by the organization
• Conducts network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls and host-based security systems
• Research emerging threats and vulnerabilities to aid in the identification of incidents