Senior Analyst Cyber Security Operations - SIEM and Automation (Remote Opportunity)

About the position Responsibilities • Manage day-to-day cyber security operations in partnership with MSSP, including incident investigation, containment, and remediation. • Develop and maintain runbooks for potential incidents, documenting responsibilities of stakeholders. • Respond to Cyber Security incidents, ensuring identification, mitigation, and remediation of malicious activities. • Design, implement, and maintain SIEM and threat detection content, including dashboards and detection rules. • Continuously research and hunt for tactics used by advanced threat groups and develop detection mechanisms. • Create automations, scripts, and workflows using SIEM and automation tools to streamline SOC processes. • Collaborate with development and operations teams for efficient monitoring and logging of security events. • Incorporate threat intelligence feeds for enrichment and alerting in the SIEM. • Advise leaders on actions during security events and potential threats to the company's security posture. • Ensure compliance with regulations and standards such as Data Privacy and PCI-DSS. • Mentor and develop talent within the team. Requirements • Bachelor's degree in Computer Science, Cybersecurity, Information Security, or related field, or equivalent experience and certifications. • 3-5 years of information security experience with a focus on Security Operations and Incident Response. • 3 years of experience in a Cyber Security Operations Center (SOC) or Incident Response team. • Proficiency with SIEM platforms (e.g., Splunk) and security automation tools. • Experience with security tools such as EDR, IDS/IPS, SWG, and firewalls. • Cyber Security related certifications (e.g., SANS, CISSP, Splunk Power User) preferred. • Technical knowledge of Linux, Windows, or MacOS systems and cloud services (AWS, Azure). • Experience with log analysis tools and query languages. • Experience with scripting languages (e.g., Python, PowerShell). • Familiarity with cyber kill chain, MITRE ATT&CK framework, and threat hunting. • Experience with ServiceNow or similar ticketing platforms. Nice-to-haves • Cyber Security related certifications (e.g., SANS, CISSP, Splunk Power User) are preferred. • Proactive self-starter with the ability to work independently and as part of a team. • Strong verbal and written communication and presentation skills. Benefits • Travel Perks and Benefits for both ALG Vacations and Hyatt • Medical, Dental and Vision Insurance • Basic Life Insurance • Short- & Long-Term Disability • Paid Parental Leave • Corporate Wellness Program • Travel Discounts & Deals • Paid Time Off & Holidays • 401(k) Plan with Company Match Apply tot his job