Security Operations Analyst L1

Our Client a Major Entertainment/Media firm located in Midtown Manhattan is seeking a Security Operations Analyst. This is a contract opportunity with no end date. This role is a hybrid opportunity, 4 days onsite. As a Security Analyst, you will play a crucial role in maintaining and enhancing our organization's cybersecurity posture. You will assist in the execution of various security initiatives and collaborate closely with cross-functional teams to implement effective security measures. A security analyst's primary duties will be to detect and respond to threats facing the Bank and continually improve our security posture.

RESPONSIBILITIES

Monitor and respond to security incidents and alerts

Regularly audit and analyze user activity logs, privileged activities, file access, and email activity

Recognize and respond to anomalous patterns of user and entity behavior

Analyze anomalous traffic in cloud environments, validate threats, and determine remediation steps.

Analyze email attributes such as headers and implement appropriate countermeasures.

Analyze and assess security threats and vulnerabilities, recommending appropriate mitigating actions

Continuously monitor networks for security breaches and other anomalous activities

Maintain detailed records of security incidents, analyses, and mitigation actions taken

Generate and present detailed reports on security incidents, trends, and responses for senior management

Participate in process review, incident briefing, and incident response meetings

Work closely with other GT&O staff to enhance system security and develop robust defense mechanisms

Stay informed and updated with the latest security technologies, trends, and threat vectors to continuously improve the organization's security posture

Knowledge of common tactics, techniques, and procedures (TTPs) used by cyber adversaries

 

QUALIFICATIONS

Bachelor's Degree required, with a preference for Cybersecurity

1+ years of experience in an IT Security Operations role

1+ year of experience with the Microsoft Defender Security Suite, including Microsoft Defender for Identity, Microsoft Defender for Office, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud

Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and anti-virus software

Strong understanding of identity management and Active Directory and Azure Active Directory

Excellent analytical and problem-solving skills with the ability to think critically under pressure

At least one entry-level cybersecurity certification:

CompTIA CySA+ or Security+

GIAC Security Essentials (GSEC)

Microsoft Certified Security Operations Analyst

Knowledge of the MITRE ATT&CK framework, and basic concepts of threat hunting

Proficiency with scripting languages

Experience with offensive security tools

Strong verbal, written, and interpersonal communication skills

Highly organized, motivated, dedicated and a team player

Availability to work during emergencies, and scheduled afterhours and weekends