L3: Principal Security Analyst

Principal Security Analyst (L3)Full-time, onsite preferred but remote candidates accepted. Principal Security Analyst (L3) are expected to handle customer-facing investigations, mentoring, and training of fellow analysts, and to participate in interaction with customers and other teams through email, phone, or video conference.Primary Duties

• Lead and execute alert triage and determine if further investigation or action is required by the customer
• Assist customers with the investigation and response of incidents throughout the incident response process
• Perform investigations in response to customer requests and be able to provide further contextual information along with recommended actions
• Proactively threat hunt using network, log, and host data within customer environments
• Provide mentorship and guidance to junior level analyst

Required Qualifications

• Analyze packet captures/data and logs to perform incident response and identify potential compromises to customer networks
• Possesses a solid understanding of the TCP/IP protocol suite, security architecture, and common TTP’s (tactics, techniques, and procedures) used by threat actors
• Experience analyzing log data in a SIEM (Exabeam, Azure Sentinel, Splunk, Cortex XSIAM.)
• Strong understanding of incident response methodologies and reporting
• Strong understanding of Windows and Linux operating systems, security events, and common attacker tactics and methodologies
• Strong verbal/written communication and interpersonal skills are required to document and communicate findings, escalate critical incidents, and interact with customers

Preferred Qualifications

• 7+ years of SOC operations experience in enterprise environments
• 6+ years of experience performing forensic analysis of logs and packet captures to identify malicious artifacts
• Higher level security certifications (CEH, GCIH, GCFA, GCFE, GCTI, GCIA, GREM, GPEN, GFNA, OCSP)
• Expertise in security incident management, forensics, and vulnerability remediation
• Strong research background and an analytical approach, especially with respect to event classification, event correlation, and root cause analysis
• A mentoring/leadership background including mentoring other analysts and orchestrating team efforts for problem solving
• Ability to work independently, manage projects to completion, and lead security initiatives

Powered by JazzHR