Cyber Security Analyst

At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values.

We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

You'll work within our established frameworks to enable the timely and effective, management, configuration, design of tooling and all other activities related to the SOC including new and emerging cyber threats.

• →Supporting the Security Specialist/Security Manager/Functional Lead in the identification and ongoing monitoring of specific security risks
• →Continuously identifying improvements in both tooling and processes to ensure services operated are aligned to industry best practice and Boeing enterprise best practices
• →Configure and utilise SIEM, vulnerability management and other security-based tooling.
• →Innovate in the areas of SIEM and SOC and develop best practice.
• →Mentor and oversee development of junior analysts.
• →Work to well-defined SLAs & KPIs.
• →Support incident response where required.

3+ years’ experience in the following areas:

• Working in a Security Operations Centre (SOC).
• Working with SIEMs and evaluating SIEM alerts.
• Experienced in using log aggregation and correlation tools (Splunk preferred).
• Experienced in interpreting systems, application and network device logs.
• Experienced in packet capture and analysis.
• Experienced in responding to security alerts and performing data-based investigations.
• Experienced in alert rule creation and development (SNORT, YARA, SIEM).
• Experienced in environment threat modeling.
• Experienced in identifying and handling security incidents.

• Experience researching current threats and vulnerabilities to Information Technology systems.
• Experience of practical threat hunting experience in a high value information/high threat processing environment dealing with persistent threats.
• Information Security qualification, Degree-level education in Information Security or related area
• CISSP Certification
• CREST – Intrusion Analyst, Cyber Threat Intelligence
• SANS GNFA, GCIA, GCIH
• Comptia Security+, CySA+
• Splunk Enterprise Data Administration
• Splunk Enterprise System Administration

This position does not offer relocation. Candidates must live in the immediate area or relocate at their own expense.