Sr. Security Analyst

Sr. Security Analyst

ECS Tech Inc is seeking a Sr. Security Analyst for their Scott AFB, IL office. This position is contingent upon contract award.

As a leading managed cybersecurity services provider, ECS delivers tailored cybersecurity solutions to customers. The Professional Services Team works directly with customers to understand needs and deliver complete solutions. You will leverage technical proficiency with Elastic SIEM, deep cybersecurity principles, and strong analytical capabilities to protect against and respond to cyber threats. Excellent communication and problem-solving skills are essential.

Responsibilities:

• Network Monitoring and Intrusion Detection: Use IDS/IPS, firewalls, and host-based security systems.
• SIEM Management: Utilize Elastic SIEM for event correlation and threat detection.
• Threat Research: Investigate emerging threats and vulnerabilities.
• Threat Detection: Implement log-based and endpoint-based detection strategies.
• Content Development: Create and customize SIEM rules, signatures, and dashboards.
• Activity Correlation: Correlate data across networks, cloud, and endpoints.
• Alert Management: Review alerts and document incidents in technical reports.
• Phishing Analysis: Analyze phishing submissions to determine threat levels.
• Incident Response Support: Provide strategies to contain and rectify breaches.
• Threat Intelligence Integration: Collaborate with threat intelligence and threat-hunting teams.
• Tool Evaluation: Assess new security tools and techniques.
• Breach Investigation: Support investigations on cyber breaches.
• Stakeholder Communication: Communicate cyber events to internal and external stakeholders.

Qualifications:

• 2+ years of cyber experience
• Deep knowledge of Elastic SIEM and related tools (Kibana, Logstash, etc.)
• Strong understanding of cybersecurity principles including network protocols and encryption
• Analytical skills to deduce patterns from complex data
• Familiarity with programming/scripting languages such as Python or PowerShell
• Experience creating and tuning SIEM rules and dashboards
• Excellent written and verbal communication skills
• Strong problem-solving aptitude under pressure

For more details on benefits, please visit ECS Tech Inc Benefits.

Key skills/competency

• Elastic SIEM
• Cybersecurity
• Intrusion Detection
• Threat Analysis
• Incident Response
• Network Monitoring
• SIEM Management
• Data Correlation
• Phishing Analysis
• Technical Reporting