About This Role
Working as a trusted technical advisor within an active Center of Excellence, the CyberSecurity Analyst provides proactive support to clients to reduce or prevent security issues on their networks. This role involves administering and maintaining security measures focused on application, web, and infrastructure security, working with key client contacts to align business and IT Security objectives, and providing security analytics and assistance with security support requests.
Responsibilities
- Monitor, respond to, and analyze SIEM alerts from monitoring tools
- Provide technical guidance and recommendations to clients to enhance their overall security posture within the managed products
- Handle daily incidents; monitor, track, analyze and record
- Work with vendors, outside consultants, and other third parties to improve information security within the organization
- Respond to security related tickets escalated from clients, and work collaboratively with the client to assist in resolving security events
- Work with other IT professionals to resolve fast moving vulnerabilities such as spam, virus, spyware and malware
- Monitor security vulnerability information from vendors and third parties
- Create Weekly and Monthly Status Reports, including daily technical task reports and contract deliverables
Requirements
- Strong written, verbal and non-verbal communication skills, especially conveying complex information in an understandable manner
- A minimum of 2-4 years of experience working with Microsoft Active Directory
- Experience in managing an organization's PCI, HIPAA, or SSAE16 certification is preferred
- Ability to analyze and resolve complex technical and business problems
- Proficient knowledge with three or more of the following technologies: Application / stateful / UTM firewalls; SIEM; DLP; Web content filtering; Web application firewalls (WAF); Vulnerability scanning and penetration testing; IPS/IDS; Security Operations Center operations; Wireless Networking; UNIX, AIX & Solaris, Linux, Windows Server Operating Systems; Endpoint and Malware
- Knowledge with NIST, FISMA, DIACAP
- Knowledge of Windows 2003-12 server platforms
- Knowledge of VMware and VM server platforms
- Knowledge of UNIX server platforms
- Working knowledge of analyzing IIS, SQL, firewall, IPS/IDS, Windows
- Web and mail logged events
- Ability to analyze IANA assigned ports (well known, registered, dynamic and private ports)
- Ability to troubleshoot common network devices, network, vulnerabilities and network attack patterns
- Ability to troubleshoot Windows Event IDs
- Ability to interact with all levels of management
- Ability to make decisions based on many variables
- Ability to manage multiple tasks/projects simultaneously
- Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 4 years of experience
Nice to have:
- CISSP, CISA or GIAC certification
- Advanced network and systems certifications such as CCNP, CCNA and CISSP
- Other industry certifications such as ITIL, Microsoft, Juniper and Checkpoint
Benefits
- Full benefits
- Unlimited paid time off
- Participation in 401(k)
- Opportunities for professional growth and development
- Opportunity to work with cutting-edge security technologies in a stimulating work environment
About the Company
Avertium is a cyber fusion and MXDR leader, delivering comprehensive security and compliance services to mid-market and enterprise customers. The company's unique “Assess, Design, Protect” methodology addresses and improves security strategy, reduces attack surface risk, strengthens compliance, and provides continuous threat protection. Avertium maximizes customer security investments, enabling customers to focus on growth, innovation, and business outcomes while assuring that their security infrastructure is resilient and adaptive to evolving threats.
