Apply on Employer Site

RKON · 2 months ago

Cyber Security Analyst II

Chicago, IL

Full-time

Onsite

Entry, Mid Level

2+ years exp

RKON is an ISO 27001 and AICPA SOC 2 Type II certified company that specializes in providing IT migration and transformation services for the mergers and acquisition market. They are seeking a Cyber Security Analyst II to work in their client-facing Security Operations Center, focusing on identifying, analyzing, and remediating potential threats while collaborating with clients and stakeholders.

Cloud ComputingCloud Data ServicesCloud InfrastructureCloud ManagementCloud SecurityCloud StorageCyber SecurityIT InfrastructureIT ManagementOutsourcing

Growth Opportunities

Responsibilities

Assist in establishing a mature and optimized Security Operations Center discipline to support managed security services focused on client-facing vulnerability and security information event management engagements

Perform threat hunts that target known vulnerabilities, threats, and other attack vectors

Assist in security console tuning

Assist in development and knowledge sharing within the team

Act as an internal information security consultant to the business and technology units, advising on risks, threats, and control practices related to SOC - Assurance and Response

Conduct operations surrounding cyber security incident response technologies including network logging and forensics, security information and event management tools, security analytics platforms, log search technologies, and host-based forensics as applicable

Collaborate and serve as liaison to key security vendor solution partners

Collaborate with RKON and client technical leads and Subject Matter Experts including Engineering, Operations, Service Desk, Applications, and client key stakeholders on matters related to security scanning and monitoring across a global footprint

Detect, respond, mitigate, and report on cyber threats/incidents that may impact the environment

Utilize analytics to identify potential vulnerabilities and threats to the environment

Participate in security incidents and act as the technical Subject Matter Expert during significant security incidents

Conduct scanning and monitoring activities to provide in depth visibility into potential known and unknown vulnerabilities and threats that may pose risk to the RKON and client environments

Resolve problems independently and understand escalation procedures

Adhere to RKON company and client policies, procedures, and security practices

Document actions in cases to effectively communicate information to internal and external stakeholders as well as for historical retrieval

Respond to clients in a timely manner (within documented SLA) with thorough and concise analysis and recommended actions

Analyze and respond to security threats from Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Email Security, Cloud Security, and other security threat data sources

Identify and remediate infrastructure and application vulnerabilities identified in continuous scanning exercises and assist with risk prioritization

Qualification

Endpoint Protection ExperienceSecurity Information Event ManagementVulnerability ManagementThreat HuntingIndustry CertificationsMicrosoft SentinelSplunkMicrosoft DefenderScriptingAutomationBusiness AcumenInterpersonal SkillsOrganizational SkillsCritical ThinkingProblem-Solving Skills

Required

Endpoint Protection Experience Required

Industry related certifications: Security+, CEH, GSEC, etc

Strong interpersonal and organizational skills

Strong business acumen including written and verbal communication skills

Critical thinking and problem-solving skills

Desire to work in SOC, Vulnerability Management, Security Information Event Management, Threat Hunt, or Threat Intel team on a long-term basis

Experience with Microsoft Sentinel, Splunk or other industry-leading Security Information Event Management technologies

Experience with Vulnerability Management technologies

Experience with Microsoft Defender for Endpoint and other Defender Suites, CrowdStrike, Sentinel One, or other industry-leading Endpoint Protection Platforms