Cybersecurity Protection Specialist

Cybersecurity Specialist Job Description

Protecting organizations from cyber threats requires a comprehensive approach that incorporates advanced technologies and strategies. Our Cybersecurity and Privacy services team is seeking a professional to join our ranks, where you will have the opportunity to help clients implement effective cybersecurity programs that safeguard their systems and data.

Cybersecurity threats are becoming increasingly sophisticated, making it challenging for organizations to protect their systems and data. As a Cybersecurity Generalist, you will be responsible for providing security solutions and experience across various domains, ensuring the protection of client systems and data.

Your expertise will include analyzing malicious traffic, building detections, application security, network security, and systems security. You will apply a broad understanding of cybersecurity principles and practices to address diverse security challenges effectively.

• Review cybersecurity events analyzed by junior analysts and serve as the escalation point for detection, response, and remediation activities
• Monitor and guide the team in triaging cybersecurity events, prioritizing, and recommending performing response measures
• Provide technical support for IT teams in response and remediation activities for escalated cybersecurity events incidents
• Expedites cyber incident response and remediation activities when delays occur, coordinating with junior and senior team members
• Reviews and provides suggestions for information security policies and best practices in client environments
• Maintains effective communication with stakeholders and reviews and shares daily, weekly, and monthly dashboard reports with relevant stakeholders

Required skills include a Bachelor's degree, minimum 2-8 years of experience in SOC operations, experience analyzing malicious traffic and building detections, knowledge of security testing tools, proficiency in common programming and scripting languages, and familiarity with cybersecurity frameworks and practices.

Preferred skills include strong communication skills, both written and oral, experience with SMB and large enterprise clients, good understanding of ITIL processes, Change Management, Incident Management, Problem Management, and strong expertise in multiple SIEM tools and other SOC environment devices.

Key ResponsibilitiesCybersecurity Event Management

The successful candidate will be responsible for reviewing cybersecurity events analyzed by junior analysts and serving as the escalation point for detection, response, and remediation activities. This includes monitoring and guiding the team in triaging cybersecurity events, prioritizing, and recommending performing response measures.

Technical Support

The candidate will provide technical support for IT teams in response and remediation activities for escalated cybersecurity events incidents. They will also expedites cyber incident response and remediation activities when delays occur, coordinating with junior and senior team members.

Policies and Best Practices

The ideal candidate will review and provide suggestions for information security policies and best practices in client environments. They will maintain effective communication with stakeholders and reviews and shares daily, weekly, and monthly dashboard reports with relevant stakeholders.

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• Minimum 2-8 years of experience in SOC operations
• Experience analyzing malicious traffic and building detections
• Knowledge of security testing tools
• Proficiency in common programming and scripting languages
• Familiarity with cybersecurity frameworks and practices

Preferred Qualifications

• Strong communication skills, both written and oral
• Experience with SMB and large enterprise clients
• Good understanding of ITIL processes, Change Management, Incident Management, Problem Management
• Strong expertise in multiple SIEM tools and other SOC environment devices

---