6 дней назад
Sr. Security Analyst
90 000 - 120 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Sr. Security Analyst (Elastic SIEM/Cybersecurity): Investigating alerts, hunting threats, and operationalizing detection capabilities across network, cloud, and endpoint telemetry with an accent on Elastic SIEM operations, detection engineering, and customer-facing security services. Focus on correlating multi-source activity, developing detection rules and automation, supporting incident response, and improving SOC workflows.
Location: Work from home in Virginia, United States. Short domestic or international travel may be required. A valid U.S. Passport and at least a Secret clearance are required.
Salary: $90,000–$120,000 per year
Company
Everforth provides managed cybersecurity and advanced technology solutions for defense, intelligence, and federal civilian agencies.
What you will do
- Monitor networks and investigate alerts using IDS/IPS, firewalls, host-based security systems, and Elastic SIEM.
- Correlate network, cloud, and endpoint telemetry to identify threats, indicators of compromise, and unauthorized activity.
- Develop and tune SIEM detection rules, machine learning rules, dashboards, visualizations, and endpoint-based detections.
- Triage alerts, analyze phishing submissions, document incidents, and support containment, mitigation, and root cause analysis.
- Create or maintain Python and PowerShell scripts for investigation support, enrichment, automation, and telemetry integrations.
- Train customer teams and improve runbooks, detection standards, triage playbooks, and SOC workflows.
Requirements
- At least 2 years of cybersecurity experience.
- Strong Elastic SIEM experience covering monitoring, detection, triage, and investigation; Kibana experience required, with Logstash or ingest pipeline familiarity preferred.
- Strong cybersecurity fundamentals, including network protocols, encryption concepts, vulnerabilities, and multi-source analysis.
- Experience creating and tuning SIEM rules, signatures, and dashboards, plus Python or PowerShell scripting.
- Strong written and verbal communication skills and the ability to work independently under pressure.
- Must possess and maintain a U.S. Passport and at least a Secret clearance.
Nice to have
- Security Operations Center experience and familiarity with EDR, SIEM, SOAR, and ticketing tools.
- Knowledge of threat actor tactics, techniques, and procedures.
- Experience with AWS, Azure, GCP, Elastic observability data, or related security telemetry.
- Certifications such as CISSP, CEH, GCIH, Elastic Certified Analyst, A+, Net+, Sec+, or GSEC.
Culture & Benefits
- Remote work arrangement with support for mission-driven cybersecurity services.
- Opportunities to work directly with customers on detection, response, and continuous improvement.
- Professional environment focused on excellence, accountability, innovation, and talent development.
- Benefits are provided by .
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
11 дней назад
Security Analyst II: Gaurdian (Cybersecurity)
6 дней назад
Senior Detection Analyst (Cybersecurity)
12 дней назад
Sr Cybersecurity Engineer
9 дней назад
Security Operations Engineer (AI)
91 200 - 118 600$
12 дней назад
Threat Analyst 3 (Cybersecurity)
74 000 - 123 000CAD
7 дней назад
Senior Security Analyst (Cybersecurity)
128 000 - 192 000CHF