Responsibilities
- Responsible for working in a 24x7 Security Operation Center (SOC) environment.
- Monitor, prioritize, correlate, analyze, and escalate security data from multiple sources including, but not limited to SIEM and endpoint EDR solutions.
- Independently follow established procedures to investigate, escalate, contain, and/or eradicate malicious activity.
- Document all activities during incident identification and provide leadership with status updates during the life cycle of an incident. Log and record all security events to internal ticketing system.
- Communicate and collaborate with the analyst team for situational awareness.
- Support network mapping and vulnerability scanning as required.
- Build and develop professional working relationships with fellow analysts.
- Assist and communicate to foster collaboration and support a team approach to operations.
- Support process improvement.
- Respond to client security related inquiries.
Qualifications
- Bachelor’s degree or equivalent level of experience.
- 2+ years' experience as a Security/Network Administrator or equivalent knowledge.
- Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems).
- Strong communication skills.
- Able to work independently.
- Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
- Knowledge of common Internet protocols and applications.
- Security+ or InfoSec security certification preferred.
Skills Required
- Microsoft Certified Security Operations Analyst Associate SC-200 certification
- Bachelor’s degree or equivalent level of experience
- 2+ years of experience as a Security or Network Administrator, or equivalent knowledge
- Knowledge of security methodologies, processes, firewalls, and intrusion detection systems
- Strong communication skills
- Ability to work independently
- Knowledge of TCP/IP protocols, network analysis, and network security applications
- Knowledge of common Internet protocols and applications
- Security+ or information security certification
What We Do
RFA is a global IT, financial cloud, and cyber-security provider to the financial services and alternative investment sectors. We take pride in redefining the future of technological support. Through our R&D, DevOps, automation, and machine-learning, RFA provides clients with tomorrow’s edge today. RFA offers bespoke solutions to clients that are system-agnostic, secure, transparent, best-in-class, and supported by holistic advice. Our expert staff offers a 24-7 service solution to help clients use technology via the public and private cloud. We create a customized strategy for every client to get business processes and workflows to run with greater speed, security, ease of use, and cost-efficiency. Our team is at the forefront of applying business robotics and automation to technology. Headquartered in New York City and London (EMEA), RFA serves over 800 clients globally with additional facilities in Connecticut, New Jersey, Massachusetts, California, and Luxembourg. RFA brings together a seasoned executive team and a committed group of over 250 highly skilled consultant technicians
