Senior Cyber Security Analyst

Position summary:

We are adding a Senior Cyber Security Analyst to our SOC team. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. Our headquarters is in Harrisburg, and about a third of the team works remotely from other countries. We engage team members in Zambia as full-time contractors. Most of our contractors have been with us for more than two years. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET.

Responsibilities:

• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Tune noisy detection rules with the security engineering team.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Check threat intelligence feeds and IOCs against our environment.
• Hand off open cases at shift change with clear notes.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Escalate confirmed incidents and follow the incident response plan.

What we're looking for:

• 5-7 years in an SOC, security analyst or IT security role.
• Working knowledge of SIEM and EDR tools.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.

Schedule: Four 10-hour shifts, Sunday to Wednesday, 6:00 AM to 4:30 PM

What you get:

Pay: $1,600 - $1,850 monthly

• Monthly payments via wire transfer or Wise.
• Paid time off.
• Company laptop.
• Annual rate review.

About us:

Our technicians handle onsite and remote support for medical offices, accounting firms and manufacturers on fixed monthly contracts. Dell, HP and Lenovo hardware is sold and supported for schools and local governments, as it has been since 2019. Company vehicles are provided for techs who drive to client sites.

If you are shortlisted, we will reach out to set up a first call.

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Brandywine Computer Services.