They want someone onsite 5 days a week the first couple months- Plymouth, MA– then they could move to a hybrid or remote work model and onsite on need basis

Must be local

Need valid LInkedIn

Possible CTH role

They would like a Cybersecurity Analyst with an analytical ability to use the solutions on their own without a lot of training.
This person will need have experience to know what they should be doing to manage the platforms.
Their solutions are all cloud based so don’t need to do any patching, just monitoring, working with vendors to make sure tickets are being responded to in a timely manner.

They Are Looking For a Cybersecurity Analyst 2 With At Least 3 Years Of Experience To Handle Day-to-day Operations And Monitoring Of The Following Security Programs

Vulnerability management – They transitioned from Rapid7 to Qualys at the beginning of the year. Its pretty self-sufficient but need someone who can monitor it, open tickets for anything that’s not getting remediated, work with IT team to patch and remediate vulnerabilities.
SIEM solution – IBM QRadar- hosted with IBM – they look for threats on the rules, when a rule has an alert they need to work with the IT team to resolve the incidents, mostly just operational noise but need someone who can follow through if an alert goes off and make sure it gets resolved.
EDR solution- CrowdStrike – well managed but they have alerts that come up, security architect is tweaking policies and rules but mostly self -sufficient, making sure agents are up to date, meeting with vendors to get reports on what’s good and bad and making sure those things get escalated and resolved.
Currently monitoring IBM Guardian but they’re looking to move that one to the IT department so not as important.

Description

Our client is currently seeking a Security Analyst to assist the CSIRT team in the Information Security Department. The Security Analyst position is responsible for monitoring and maintaining security controls as necessary to support the Information Security Program.

Major Duties And Responsibilities

Responsible for monitoring and maintaining a variety of security controls products to include SIEM, Vulnerability Management, Endpoint and Cloud Security
Responsible for 1st line ticketing and participation in research and issue escalation
Maintain operational SOP documentation related to security software, products
Collaborate with Information Technology groups on various IS issues
Seek and identify issues requiring security awareness
Enforce stated Information Security policies
Produce metrics or reports as needed regarding security controls and daily tasks
Physical presence requirement in office role reporting to Plymouth Tech Center

Qualifications

Require 3+ years’ minimum experience providing support of information systems and information technology, two years additional experience in an information security department role preferred.
Bachelor degree in IS preferred
IT/IS Industry certifications and proven technical proficiency in Windows, Linux, Azure, Amazon, networking or other IT foundational skillsets
Technical knowledge of information security technologies including firewalls, intrusion detection/prevention systems, security event monitoring, log management, and vulnerability assessment
Proficiency with MS Excel and event logs
Social media security issue awareness
Verbal communication skills and ability to maintain a professional and collegiate demeanor while enforcing policies
Critical thinking, methodical and analytical skills
Self-motivated with demonstrated desire to continue professional growth
Mitre attack framework, NIST, FFIEC or other Information Security related regulatory or threat intelligence awareness preferred
Experience working within a regulated or large departmental structured institution preferred

Jobs in Plymouth

Cybersecurity Analyst