Graduate Cyber Security Analyst

Annual revenue from managed services has grown every year since 1984. Pebblegrid protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers.

Job summary:

This is a backfill for a team member who moved to another team. The SOC team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Our headquarters is in Phoenix, and about a third of the team works remotely from other countries. You will join as an independent contractor on a long-term agreement. Payment is monthly in USD. You will need at least 4 hours of overlap with US Central time. Day-to-day communication is in Slack and Google Meet.

Key responsibilities:

• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Check threat intelligence feeds and IOCs against our environment
• Document incidents with timeline, impact and root cause
• Hand off open cases at shift change with clear notes
• Report on security awareness training and phishing simulation results

Minimum qualifications:

• Experience reading Windows Event Logs, Sysmon and Linux logs
• Must be able to pass a background check
• Basic scripting in PowerShell or Python
• Ability to work shifts, including some nights, weekends or holidays as scheduled

Preferred:

• KQL or SPL query writing
• CySA+, GCIH, GCIA or BTL1 certification
• Prior help desk or network administration experience

Schedule: Second shift, 2:00 PM to 10:30 PM, Monday to Friday

Perks and benefits:

• Paid in USD
• Long-term engagement
• Paid time off

Please mention your notice period and expected salary.

Applications are reviewed on a rolling basis.

Duration: 9 months. Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pebblegrid LLC.