Associate Security Analyst

DirectDefense has an immediate opening on our Security Operations team. This elite team of Security Analysts doesn't just monitor for attacks and malware; they actively and aggressively hunt for evidence of compromise across our clients' environments around the clock and provide actionable remediation guidance. As a Security Analyst, you will be part of a revolution in managed security. You will work with brilliant people to spot, track, and eradicate hackers and malware. You will also be on the ground floor of building a next-generation Security Operations Center.

Responsibilities

• Analyze user behavior, logs, and alerts from a variety of different technologies (NGAV / EDR, Firewall, IDS / IPS, Web Proxy, etc.) for clients from a variety of industries.
• Monitor, triage, and investigate SIEM alarms and client support requests.
• Assist with developing and tuning new SIEM detection capabilities.
• Contribute to and participate in documenting Incident Response activities.
• Conduct regular vulnerability scans, analyze the results, and suggest remediations.
• Conduct reporting on security threats, metrics, and defense effectiveness and deliver to a variety of client audiences.

Qualifications

• 3-5 years of relevant experience in Cybersecurity, risk management, security operations, network operations, or equivalent knowledge.
• Experience with SIEM and EDR tools for monitoring, detection, and response to potential security incidents.
• Proven experience investigating potential threats, either through proactive threat hunting or analyzing customer-reported tickets.
• Strong ability to triage events, accurately identifying real threats versus false positives.
• Proficient in log analysis, interpreting system logs to detect security events and identify root causes.
• Familiarity with threat intelligence, applying findings to improve detection and response efforts.
• Understanding of network protocols and system vulnerabilities to assess and address s