Cybersecurity Incident Response Triage Analyst

Required

• US Citizenship required
• 1 - 2 years of experience in information security, or other equivalent combination of education or equivalent work experience.
• 1-year of experience performing event and log analysis including one or more of the following: Anti-Virus,
• Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools and other security tools found in large enterprise network environments; along with experience working with Security Information and Event Management (SIEM) solutions.
• Excellent written and oral communication skills, attention to detail, and interpersonal skills.
• Familiarity with various network and host-based security applications and tools, such as network and host assessment/scanning tools, network and host-based intrusion detection systems, and other security software
• Familiarity with various network and host-based security applications and tools, such as network and host assessment/scanning tools, network and host-based intrusion detection systems, and other security software
• Familiarity with TCP/IP, common application layer protocols, and packet analysis of the same.
• Familiarity with static and dynamic malware analysis concepts.
• Experience with indicators of attack and compromise.
• Familiarity with Windows / Linux architecture and endpoint analysis of the same.
• Familiarity with basic data parsing and analysis tools, i.e., Excel, grep, sed, awk, regex, etc