Security Operations Analyst
Apply NowCompany: RICEFW Technologies, Inc.
Location: Sacramento, CA 95823
Description:
Bachelor's degree in Cyber Security or related field, or equivalent work experience 4-years of experience in Security Operation Centers or a similar role with at least 2-years managing all aspects of a Security Operation Center
Formal IT Security/Network Certification such as CompTIA Security+, Network+, ISC2 CC, ISSAP, CCSP, SANS GIAC Certified Intrusion Analyst (GCIA) or SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Continuous Monitoring (GMON) or related Degree
Candidate must have familiarity with Cyber Kill Chain, MITRE ATT&CK, and NIST Cybersecurity Frameworks
Knowledge of common indicators of compromise and of methods for detecting these incidents Knowledge of IT core infrastructure and cybersecurity components/devices
Have demonstrated expertise in developing, implementing, tuning, and automating operations center programs
Experience with scripting preferably with Python/PowerShell
Experience operating and tuning EDR/XDR platforms
Experience monitoring threats via a SIEM console with significant experience performing analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, or intrusion prevention logs
Knowledge of diverse operating systems, networking protocols, and systems administration, and system forensic investigation techniques
Be adept at managing crises; provide front-line coordination in responses to a myriad of crises
Required Skills : Network Security,Python
Additional Skills : Security Administrator,Cyber Security Administrator,Security Analyst,QA / Tester
Formal IT Security/Network Certification such as CompTIA Security+, Network+, ISC2 CC, ISSAP, CCSP, SANS GIAC Certified Intrusion Analyst (GCIA) or SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Continuous Monitoring (GMON) or related Degree
Candidate must have familiarity with Cyber Kill Chain, MITRE ATT&CK, and NIST Cybersecurity Frameworks
Knowledge of common indicators of compromise and of methods for detecting these incidents Knowledge of IT core infrastructure and cybersecurity components/devices
Have demonstrated expertise in developing, implementing, tuning, and automating operations center programs
Experience with scripting preferably with Python/PowerShell
Experience operating and tuning EDR/XDR platforms
Experience monitoring threats via a SIEM console with significant experience performing analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, or intrusion prevention logs
Knowledge of diverse operating systems, networking protocols, and systems administration, and system forensic investigation techniques
Be adept at managing crises; provide front-line coordination in responses to a myriad of crises
Required Skills : Network Security,Python
Additional Skills : Security Administrator,Cyber Security Administrator,Security Analyst,QA / Tester