Cyber Security Analyst

A bit about us

Certifications include ISO 27001 and SOC 2 Type II, and we hold partner status with Microsoft, Cisco and VMware. Across Texas, the company runs 14 branch offices and a central depot for hardware staging and imaging. Tickets live in ConnectWise and everyone logs time to the quarter hour.

Overview

Woolspring has an opening for a Cyber Security Analyst. The Security Operations team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. The company is based in Houston, the US. The team is spread across multiple countries. We hire in Nepal through an employer of record, so this is a regular full-time job with local payroll and statutory benefits. You will need at least 4 hours of overlap with US Central time.

Duties

• Document incidents with timeline, impact and root cause.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Check threat intelligence feeds and IOCs against our environment.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Write and update SOC runbooks and playbooks.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.

Required qualifications

• 3+ years in an SOC, security analyst or IT security role.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Clear written communication for incident tickets and reports.

Pay and benefits

• Flexible hours.
• Two weeks of paid leave at year end.
• Annual team retreat.
• Health insurance through our employer-of-record partner.
• Company laptop.

We will only contact shortlisted applicants.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Woolspring.