Cybersecurity Analyst I

Company overview:

Small enough that you will talk to clients directly in your first week. Every report is written by the person who did the testing, not a separate writing team.

We're looking for a Cybersecurity Analyst I to join our team. This is a remote role. The operations team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Remote position. Most of the team is in Houston, but nobody is required to come in. We use Slack, Notion and Google Meet. Cameras on for team calls.

Main duties:

• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests.
• Document incidents with timeline, impact and root cause.
• Write and update SOC runbooks and playbooks.
• Escalate confirmed incidents and follow the incident response plan.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.

What you'll need:

• 1-2 years in an SOC, security analyst or IT security role.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Basic scripting in PowerShell or Python.

Schedule: Day shift with one week of on-call every six weeks

Pay and benefits:

Pay: $37.00 - $42.00/hr

• Home office stipend.
• Referral program.

Duration: 9 months. Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Mid-South Cyber.