R-00173461 Attack Sensing & Warning Analyst (AS&W Analyst)
Tasks
- Aggregate indicators of compromise
- Analyze attacker tactics
- Coordinate remediation plans
- Create security reports
- Develop detection scripts and tools
- Escalate alerts using playbooks
- Identify root cause of incidents
- Investigate endpoint activity
- Investigate network activity
- Lead incident response activities
- Mentor junior SOC staff
- Monitor endpoint and network alerts
- Perform log analysis
- Summarize findings for stakeholders
- Triage security alerts
Perks/Benefits
- N/A
Skills/Tech-stack
APT detection | Cyber Kill Chain | Cyber Threat | Cyber Threat Intelligence | Detection and Response | Endpoint Detection and Response | Endpoint detection | Incident Response | Indicator of Compromise | Kill Chain | Log Analysis | MITRE ATT and CK | Network Forensics | Penetration Testing | SIEM | Splunk | Threat Intelligence | Threat hunting | Vulnerability Assessment
Education
Related jobs
-
Cyber Security Analyst USD 106K-129KCyber Operations | Cyber Security | Emulation | Encryption | Fraud DetectionMid-level Full TimeChantilly, VA9h ago
-
Senior Software Engineer, Information Security USD 120K-160KAWS IAM | AWS Lambda | AWS OpenSearch | Amazon SageMaker | BashHybrid work | In-office 3 days per weekSenior-level Full TimeMountain View, CA / Remote (US) R9h ago
-
Threat Detection & Response Analyst (Tier 1) USD 80K-106KCloud Security | Cyber Kill Chain | Database security | Detection and Response | Digital forensicsEducational assistance | Health and wellness benefits | Income replacement for qualified employees with disabilities | Paid Holidays | Paid maternity and parental bonding leaveMid-level Full TimeWatermark - 410 North Scottsdale Road, … R1d ago
-
Digital Network Exploitation Analyst (DNEA) USD 150K-220KAll-source intelligence | Cybersecurity | IP Networking | Network Traffic | Network Traffic Analysis401K company matching | 9/80 work schedule | Dental insurance | Medical insurance | Paid holiday shutdownSenior-level Full Time420 National Business Parkway, Jessup, MD, …1d ago
-
SOC Cyber Security Analyst I USD 107K-145KAntivirus | Data correlation | Elasticsearch | FTP | Firewall401k match | Education Training Reimbursement | Flexible spending account | Health & wellness reimbursement | Paid time offMid-level Full TimeAtlanta, GA, USA1d ago
-
ACAS | Assessment and Authorization | Continuous Monitoring | JSIG | Management FrameworkMid-level Full TimeMDLI22, United States1d ago
-
Cybersecurity Analyst USD 69K-125KAWS | Application Management | Behavioral Analysis | Cloud Security | Cloud platformFlexible shift options | On-site workMid-level Full Time3347 Whitehall OH, United States1d ago
-
Cleared Information System Security Officer (ISSO) — L3 USD 140K-180K800-53 | ACAS | Cloud Security | Configuration Management | Continuous MonitoringOnsite work | Relocation assistanceMid-level Full TimeLorton, VA, US1d ago
-
Antivirus | CVE management | Cloud Security | Cybersecurity | EDR401k match | Dental insurance | Disability insurance | Flexible PTO | Health insuranceSenior-level Full TimeLivingston, NJ / New York, NY …1d ago
-
Compliance & Security Engineer USD 18K-24KAWS | Application Security | Audit evidence | CCPA | COPPA401k matching | Company paid life insurance | Company-paid housing | Dental insurance | Flexible vacationSenior-level Full TimeSan Francisco R1d ago
-
Cybersecurity Analyst (3rd shift/Nights) USD 150K-204KAnomaly Detection | Automation and response | Detection Systems | Endpoint protection | FirewallGrowth and development opportunities | Night shift schedule | Onsite work | Training opportunitiesEntry-level Full TimeKansas City, MO SOC1d ago
-
Cyber Security Analyst (US Based) USD 85K-115KAccess reviews | Active Directory | Azure AD | Azure AD Identity Security | Azure Active DirectoryMid-level Full TimeUnited States1d ago
-
Security Operations - Incident Response & Forensics USD 100K-150KCIS Controls | Containment | Crisis management | Detection engineering | Detection pipelinesMid-level Full TimeMilwaukee, WI | Chicago, IL | …1d ago
-
Cybersecurity Administrator, Data Loss Prevention USD 110K-190K800-171 | Access Control | Access Management | CASB | CIS Controls401k match | Casual dress code | FSA | Free daily lunch | HSASenior-level Full TimeWashington, District of Columbia, United States1d ago
-
Cybersecurity Administrator, Data Loss Prevention USD 110K-190KAccess Control | Access Management | CASB | Cloud Security | CrowdStrike401k match | Casual dress code | Dental insurance | FSA | Free lunchSenior-level Full TimeSan Francisco, California, United States1d ago
-
Information Systems Security Officer USD 140K-160KACAS | Account Management | ArcSight | Audit Logging | CAP401k match | Casual dress code | Dental insurance | FSA | Free daily lunchSenior-level Full TimeEl Segundo, California, United States1d ago
-
Cybersecurity SOC Analyst II USD 110K-160K800-171 | Azure Sentinel | Bash | CMMC | Cause analysis401k match | Casual dress code | FSA | Free lunch | HSAMid-level Full TimeWashington, District of Columbia, United States1d ago
-
Cybersecurity SOC Analyst II USD 110K-160K800-171 | Alert triage | Azure Sentinel | Bash | CIS Controls401k match | Casual dress code | FSA | Free lunch | HSAMid-level Full TimeSan Francisco, California, United States1d ago
-
Cybersecurity SOC Analyst II USD 110K-160KAlert triage | Azure Sentinel | Bash | Cloud Security | CrowdStrike401k match | Casual dress code | FSA | Free daily lunch | HSAMid-level Full TimeEl Segundo, California, United States1d ago
-
Security Engineer, Detection & Response USD 300K-405KAttack behavior analysis | Behavior Analysis | Cloud Operations | Detection engineering | EDRCompetitive benefits | Flexible working hours | Generous vacation | On-call rotation | Optional equity donation matchingMid-level Full TimeSan Francisco, CA | New York …1d ago
-
Security Engineer USD 113K-148K800-53 | AWS IAM | CI/CD | CI/CD Security | CIS Benchmarks401k matching | Dental insurance | Employee assistance program | Employee referral program | Employee resource groupsSenior-level Full TimeDenver, CO, USA1d ago
-
IT Operations Specialist I - 3RD Party Risk Review USD 83K-154KActive Directory | Application Security | Azure Active Directory | Conditional Access | Control Validation401k company match | Dental insurance | Disability coverage | EAP | Life insuranceMid-level Full TimeGreenville, US-SC, United States1d ago
-
Identity and Access Management, Senior USD 105K-164KAccess Control | Access Management | Active Directory | Ansible | AutomationHybrid work flexibility | Office based 2 days per weekSenior-level Full TimeEl Dorado Hills, CA, United States1d ago
-
Junior Security Operations Center Analyst USD 73K-90KAlert triage | Endpoint Monitoring | Event management | Incident Response | Log AnalysisEntry-level Full TimeFAIRFAX, VA, United States1d ago
-
Junior Vulnerability Management Analyst USD 80K-120KACAS | Cloud Security | Continuous Monitoring | Cybersecurity operations | Endpoint SecurityEntry-level Full TimeFAIRFAX, VA, United States1d ago