Description

Experience:

Required Skills

3-5 years experience preferred

Typical Duties And Responsibilities

Standard 3 days on site, more as required
Travel occasionally for 0-2 nights
Maintain documentation
Support enterprise logging and analysis solutions
Analyze Log files for suspicious activity
Analyze event data for suspicious patterns
Analyze log sources, assess threats, and define alerting criteria
Develop log policies by creating rules, setting thresholds, and prioritizing alerts based on impact and urgency
Work with IR Engineering to configure data ingestion, detection rules, and fine-tune detection
Work with CIRT to configure incident creation, explore opportunities to enrich incident data, and assign incidents to CIRT teams
Review policies regularly, address false positives/negatives, and stay updated on technology
Data extraction
Reporting
Note: this is not an Incident Response role

Desired Skills (mastery)

Desired Skills (proficient)

Desired Skills (familiar)

Desired Certifications

CompTIA Security+, Certified Information Systems Security Professional (CISSP) Glider Assessment Required?

Additional Details

ScaleneWorks INC

New Jobs