Cybersecurity Specialist

The role of the IT Security Operations Analyst II is multifaceted, requiring a unique blend of technical expertise and business acumen. As a key member of the cybersecurity team, you will be responsible for protecting our information systems and networks from cyber threats. This position demands strong knowledge of blue team operations, security operations, vulnerability management, incident response, and security engineering, with practical experience using a range of endpoint and network security tools.

This includes leveraging the latest threat intelligence to identify and detect emerging cyber threats, enhancing team efficiency by identifying opportunities for process tuning, developing automation playbooks, and optimizing the use of security technologies. You will also review and provide technical recommendations for tuning security controls to strengthen our security posture.

In addition, this role involves acting as an escalation point for both process and technical guidance within the team, conducting quality audits of incident tickets to ensure adherence to established processes and standards. You will perform in-depth investigations of security alerts, including those escalated by Level 1 SOC Analysts, and analyze technical data to assess whether anomalies represent potential security threats.

Key Responsibilities:

• Leverage the latest threat intelligence to identify and detect emerging cyber threats.
• Enhance team efficiency by identifying opportunities for process tuning, developing automation playbooks, and optimizing the use of security technologies.
• Review and provide technical recommendations for tuning security controls to strengthen the organization's security posture.
• Act as an escalation point for both process and technical guidance within the team.
• Conduct quality audits of incident tickets to ensure adherence to established processes and standards.
• Perform in-depth investigations of security alerts, including those escalated by Level 1 SOC Analysts.
• Analyze technical data to assess whether anomalies represent potential security threats.

Bachelor's degree in Computer Science, Information Technology, or a related field is required for this role, along with at least 2 years of experience in a Level 2 (L2) Cyber Security role. Highly desirable certifications include CompTIA Security+, Cybersecurity Analyst (CYSA+), or equivalent credentials.

Technical Skills:

• Strong understanding of network and endpoint security solutions, including firewalls, proxies, antivirus, and IDS/IPS concepts.
• Proficient in networking protocols and technologies (e.g., TCP, IP, HTTP/HTTPS).
• Hands-on experience with SIEM, UEBA, and EDR platforms as a Level 2 security analyst.
• Proficiency in open-source intelligence (OSINT) techniques and tools (e.g., Maltego, Shodan, SpiderFoot) for threat hunting.
• Advanced knowledge of Unix, Linux, and Windows operating systems.
• Experience with attack and penetration testing methodologies and vulnerability assessment tools (e.g., Metasploit, Burp Suite, Nmap, Nessus, Qualys).
• Ability to develop scripts, tools, or methodologies to enhance incident investigations and processes (e.g., Python, PowerShell, Wireshark).
• Solid understanding of web application security principles and practices.
• Strong foundational knowledge and hands-on experience in applying AI and machine learning algorithms to enhance security measures and automate threat analysis.

Investigation and Analysis Skills:

• Proficient in advanced investigation techniques, including: Network forensic acquisition and analysis (e.g., Wireshark, PacketTracer, open-source tools)
• Endpoint forensic acquisition and analysis (e.g., EnCase, X-Ways, Axiom, IEF, FTK)
• Memory analysis
• Analysis of diverse security logs (e.g., endpoint, security appliances, SIEM, Windows event logs, syslog)
• Reverse engineering of malware
• Email header analysis
• Vulnerability report analysis and remediation

Communication and Leadership:

• Excellent verbal and written communication skills, with the ability to produce clear, structured reports.
• Comfortable leading investigations and effectively communicating with both technical and non-technical stakeholders.
• Demonstrates a strong sense of personal responsibility for continuous learning and professional development.