Security Operations Analyst (Linux, English)

The Security Operations Analyst is responsible for protecting the information assets of the business by monitoring security systems, investigating threats, and advising on improvements to security controls.

Configures and monitors cloud service and on-premise security measures to detect and protect against security threats. Performs triage of security incident reports. Performs threat hunting to find malicious activity on systems. As part of security incident response teams, performs technical activities for investigation, containment, eradication, and recovery.

Come be part of a winning IT Security team!

Responsibilities: 

• Regularly review alerts generated by security systems, including Managed Detection and Response (MDR), Extended Detection and Response (XDR), email filtering, and Data Loss Prevention (DLP). 
• Proactively threat hunt for malicious activity using security tools.
• Communicate with stakeholders regarding violations of organizational information security policy.
• Configure tools used for security monitoring and data collection.
• Triage security incident reports and alerts to determine severity. Escalate security incident response processes when appropriate.
• Collect and analyze security log and event information for Indicators of Compromise (IOC’s).
• Execute steps from security incident response playbooks to perform analysis, containment, eradication, and recovery steps.
• Review output from vulnerability scanning solutions, prioritize based on risk, and work with stakeholders to implement solutions.
• Review system configurations for compliance with organizational policies.