Cybersecurity Analyst

We operate two 24/7 network operations centers and a security operations center, staffed in three shifts.

About the role:

New York City Business Technology is hiring for the Cybersecurity Analyst role to monitor, investigate and respond to security alerts across our environment. The SOC team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. We work hybrid out of Irving, usually three days in, two days remote.

Job duties:

• Help with user access reviews and offboarding audits
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
• Write and update SOC runbooks and playbooks
• Tune noisy detection rules with the security engineering team
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Check threat intelligence feeds and IOCs against our environment
• Hand off open cases at shift change with clear notes

Qualifications:

• 2-4 years in an SOC, security analyst or IT security role
• Must be able to pass a background check
• Clear written communication for incident tickets and reports
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Ability to work shifts, including some nights, weekends or holidays as scheduled
• Working knowledge of SIEM and EDR tools

Preferred:

• Malware analysis in a sandbox
• CySA+, GCIH, GCIA or BTL1 certification
• KQL or SPL query writing
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines

Schedule: Day shift with one week of on-call every six weeks

Compensation and benefits:

• Medical, dental and vision insurance
• 401(k) with company match
• Paid time off
• Free parking
• Gym membership reimbursement

Most hires start within two to three weeks of an offer.

This position requires a background check.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at New York City Business Technology.