Threat Specialist

Other

0 views0 saves0 applied

Key Responsibilities

A bachelor’s degree,

Technical Tools

Other

Perform triage of global security alerts generated from various sources (including IPS, Web Security, Event Logs, Endpoint Protection, Brand Protection, Phishing)
Respond to any incidents identified from analysis of security alerts
Triage & route internal support tickets sent to the Security team
Creation & revision of threat detections
Perform SIEM product administration for event correlation and threat detection
Perform SOAR playbook/dashboard management and product administration
Provide insider threat investigation assistance to teams of internal stakeholders
Drive automated detection, response, and configuration through various scripting and programming languages
Evaluate commercial and open-source tools as needed
Collaborate with internal Infosec peers to continuously improve security posture
Contribute to internal documentation of standard processes & procedures
Educate users on security best practices
Assess security risks as they relate to new projects and initiatives
Attend security conferences, seminars, and regular training to stay ahead of the ever-changing security landscape

A bachelor’s degree, or equivalent experience for 1-3 years in industry
Interest in digital forensics and physical security
A passion for security and problem solving
Heightened attention to detail and forward thinking
Strong knowledge of either Windows, MacOS, or Linux with an interest in learning the details of platforms that you might not have experience with
Knowledge of the Incident Response Cycle
Knowledge of static & dynamic malware analysis, including network packet captures
Knowledge of core networking & cloud security concepts
Experience with Security Information and Event Management (SIEM) products
Experience with Endpoint Detection & Response (EDR) products
Experience with SOAR (Security Orchestration, Automation, and Response) products
Experience with data analysis of events in security related sources such as IPS, Web Security, Endpoint Protection, Event Logs
Experience working with GitHub
Experience with PowerShell, Bash, Python, Ruby, or Perl
Exceptional time management skills
Excellent verbal and written communication skills