IT Security Analyst (Tier 1)

*This is a full-time onsite role located in Tampa, FL.

*The shift for these positions is for evening or overnight shift, including weekends.

POSITION SUMMARY:

Working within the Digital Hands Operations Center, the IT Security Analyst (Tier 1) acts as the initial point of contact for customer calls and performing Level 1 triage within a Network Operations (NOC) and Security Operations Center (SOC) environment. Daily tasks include monitoring alarms and responding to alerts coming from a wide variety of IT and networking systems, including security and network infrastructure, servers, and appliances. First responders are also responsible for initial response to alerts from firewalls, IPS/IDS, SIEM, and Host-Based Security tools. The applicant must possess a sound understanding of desktops, servers, networking, and security concepts. This role reports to the Director of Cyber Security Response.

DUTIES AND RESPONSIBILITIES:

• Work in a shift-based call center environment, handling in-bound support calls, creating and remediating  incident tickets through the service management platform.
• Respond to health and availability alerts generated by monitoring and management platforms, customer email requests and queries, remediating or escalating as required.
• Respond to Security Alert based on severity and risk.
• Run analytical queries within SIEM (multiple platforms) and endpoint security solutions.
• Reference open source resource and Threat Intel in identification malicious activity.
• Implement Firewall Blocks.
• Perform Scheduled checks of network infrastructure and security appliances (SEOG/NEOG).
• Communicate with customer via email and telephone.
• Embrace opportunities to enhance and improve process workflows and the customer experience. 
• Other duties as assigned.

EDUCATION AND WORK EXPERIENCE:

• Bachelor's Degree and/or 1-3 years of experience in an information technology role.
• Understanding of network security attacks, vectors and network protocols including TCP, UDP, ICMP, SNMP, HTTP, and FTP.
• Skills and training to support security and networking equipment such as firewalls, routers, switches, and other related infrastructure.
• Experience managing Microsoft Windows desktop and server Anti-Virus and Advanced End Point Protection solutions.
• Professional certifications such as A+, Security+ and Network+, SANS/GIAC (GSEC), and/or equivalent are preferred.

KNOWLEDGE, SKILLS AND CHARACTERISTICS REQUIRED:

• A keen interest in security and the need for the confidentiality, integrity and availability of information and information systems to be maintained.
• Skills and training to support security and networking equipment such as firewalls, routers, switches, and other related infrastructure. 
• Working knowledge of networking concepts and remote access protocols such as LANs/WANS, VPNs, TCP/IP, UDP, ICMP, SNMP, HTTP, and FTP. 
• Knowledge of Basic IT Security concepts.
• Excellent organizational and time-management skills and the ability to multi-task and prioritize.
• Excellent communication, presentation and listening skills.
• Capability of learning and performing all the activities that everyone on the shift does.