Analyst Security

Overview

Experience

- 3-6 Years as Security Administrator & Information Security Domain.

Tools

- Crowdstrike, Zscaler,, DLP, SIEM, & Python Scripting for automation

Skill Set: -

Should have good knowledge on

-

• Endpoint Security
• Web Filtering & proxy
• Cloud Security
• Email Security
• SIEM & SOAR
• Network Detection & Response
• DLP Admin
• Python Scripting & Automation

Responsibilities

• Develop detection rules to support our SOC’s alerting and response capabilities.
• Provide expert analytic investigative support to analysts for complex security incidents.
• Implement and execute administrative, management, and lifecycle procedures for the SIEM.
• Review security controls measures, identify gaps in the security architecture, and implement improvements or enhancements as needed.
• Implement email security standards such as DKIM, SPF and DMARC.
• Demonstrated experience with deploying and operating network security tools, including but not limited to Antivirus, IDS, firewalls, proxies and security gateways.
• Evaluates system security configurations to ensure efficacy and compliance with policies and procedures.
• Researches and investigates the potential impact of new threats and exploits and recommends solutions to management.
• Provides guidance on risks, vulnerabilities, or potential vulnerabilities within the architecture.
• Deploy, configure, and maintain Data Loss Prevention (DLP) tools and solutions across enterprise systems.
• Automate administrative tasks, reporting, and data processing using Python scripts and applications.
• Excellent communication skills both written and verbal include the capacity to communicate complex and technical issues.

Certification

CEH, CISSP