Analyst, Cyber Security and IT Risk Management

Tasks

• Monitoring the Microsoft environment, design, metric implementation, and metric onboarding, as well as collaborating with the Security Operations Center (SOC) team
• Design, Deployment, Monitoring, and Maintenance of Automation for Threat Risk Management and Incident Response (IR/R TOC)
• Monitoring Trends Within the SOC and Potential Incident Response
• Escalation of Incidents as Needed
• Collaboration with IT and Digital Organizations
• Serve as a point of contact for the IT and digital teams to understand their environments and how they can impact the company
• Support for the design and implementation of security policies
• Assisting in the review of security architectures to ensure that organizational concerns are addressed and resolved
• Design, Development, and Implementation of Control Mechanisms
• Services: Cyber – including the agency
• Support for the 1st SOC Analyst
• Development of IT security policies and security guidelines
• Providing Support for Audits
• Effective implementation of various client-specific policies and procedures, methodologies, and frameworks

Requirements

• Results of the development of our IT risk profile using the tools RacCup i, Somelent, and sianalysis
• Experience with Python scripting
• Experience with data mart automation, integration, and setup of Power BI Q in the public cloud
• Experience in setting up modern business automation and operations using Encompass Cloud
• Planning with IAA and API

Recommended Qualifications

• Experience monitoring and understanding applications in Linux and Windows environments, including:
  • Windows Server
  • Forensics in Windows/Linux (Linux Mirrors Access Tool)
  • Familiarity with Blue Team Integration
  • EDR Detection Techniques Using Hacking Tools Such as Spicy NET
  • Familiarity with common logging frameworks / logins
  • Purity Management in Microarchitecture