Cybersecurity Sr. Analyst

• • Analyzing network traffic to identify compromised systems, negate denial of service attacks, and pinpoint resource abuse.
  • Incorporate threat intelligence feeds into Microsoft Sentinel to enhance threat detection and response capabilities.
  • Develop and implement security automation scripts and playbooks in Microsoft Sentinel to streamline security operations.
  • Create reports and documentation related to security incidents, investigations, and overall security posture.
  • Supporting priority incident investigations and threat intelligence discoveries with hunting expertise to identify the extent of any potential compromise.
  • Respond to security incidents by containing, eradicating, and recovering from them using Microsoft Defender's tools and features.
  • Educate users and colleagues about cybersecurity best practices and the use of Microsoft Defender.
  • Perform onboarding and offboarding defender agents.
  • Troubleshoot Defender agents not reporting to the portal
  • Conduct investigations using EDR and live response
  • Conduct Vulnerability Assessment using Defender.
  • Investigate, identify, and prevent or mitigate abusive activities such as intrusion attempts, DDoS, malware distribution, phishing attacks, etc.
  • Monitoring threat/vulnerability landscape and security advisories
  • Appropriately manage time and customer issues based on issue severity and business needs
  • Continuously monitors the security alerts queue, triages security alerts
  • Monitors health of customer security sensors and SIEM infrastructure
  • Ensures documented processes and procedures are relevant and up to date
  • Investigate, document, and report on any security threat issues as well as emerging trends
  • Enabling a world-class cyber defense program by working closely with other technical, vulnerability management, incident management, intelligence analyst and forensic personnel to develop a fuller understanding of the intent, objectives, and activity of cyber threat actors, and ultimately drive improvement to the organizations’ overall security posture
  •  Notify appropriate business stakeholders about serious security events, implement security improvements by assessing current situation, evaluating market trends, and anticipating requirements
  • Perform threat hunting and threat analysis
  • Monitor, detect, and analyze network threats
  • Employ automation to aid in research and hunting tasks
  • Write blogs and papers related to threat hunting and analysis
  • Investigate, document, and report all security issues to contribute to incident response

  • #LI-SK2

Qualifications:

• A Bachelor’s or Master's degree from a university (preferably in Computer Science, Engineering, or a related discipline), or equivalent security industry work experience