Job details
Job type full-time
Full job description
Security support analyst
Location: tysons, va or remote reports to: cyber services operations manager start date: immediately
About qomplx developer of enterprise operating systems designed to support the development and management of decision platforms in virtually any business domainThe company`s system delivers customers advanced detection and monitoring, adaptive response, and risk optimization capabilities against advanced attackers, enabling clients to quickly and easily integrate all of the disparate data sources across the enterprise into a unified analytics infrastructure to make better decisions.
Job summary:
To hold this role, you are expected to have a working knowledge of signals analysis (alerts, incidents, events, etc.) and threat intelligenceYou also have a solid foundation with networking including tcp/ip, active directory, vpns and a basic understanding of routing and vlansYou want to find ways to make your work more effective by tackling a problem and documenting the solution so it can be repeated and eventually automatedYou seek to review and provide our clients with actionable decisions they can make to adapt and respond to possible cyber-incidentsYou have a passion for solving interesting problems and a desire to expand your knowledge in all areas of threat analysis.
This role requires a unique blend of technical analyst, someone who can draw lines between seemingly unconnected acts to find patterns and anti-patternsUnderstanding of how systems interact with each other and how people interact with systems really adds to your value, above being a simple human monitoring systemYou have the ability to document and perform repeated tasks as needed.
Communication and critical thinking is key to succeeding in this positionThe ability to find and document gaps in the tools you work with, as well as ways to move forward or work around those gapsYou are expected to suggest solutions where needed with a fresh perspective.
This is a fast-paced environment which includes incidents and events that can occur at any time, and you are expected to be available and responsive to assist the team as neededAdaptability and flexibility is key in this role as you will be asked to do anything and everything as neededA “jack of all trades” attitude is a must.
Qualities:
The willingness to work and think outside the box will ensure success in this roleThe desire to “pitch in” where needed is critical as there are unlimited opportunities to learn and grow your skill set.
A passion for problem solving and critical decision making – curiosity and a resistance to static answers in dynamic situations.
Comfort with writing procedural or narrative practices – document the story of what you did and build a repeatable method that others will follow.
Solid translation skills – take the technical details and convert them to common sense explanations, assisting any audience to quickly understand the problem while providing guidance and options for action and solutioningMentor and eternal student – the problems we face are constantly changing, sharing our knowledge, and learning from each other is the only way to keep up.
Responsibilities:
Perform analysis around cyber-events by conducting research; evaluating the effect and impacts generated by the event, developing or recommending analytic approaches of solutions to problems with incomplete information.
Identification of cyber threats through common methodology such as the mitre att&ck framework
Utilize multiple analytic tools, databases and techniques to perform signal analysis and provide documented outcomes.
Provide feedback and drive continuous improvement of internal processes, products and services.
Share information with fellow analysts to improve the efficiency and response capabilities of the soc organization and services.
Working with tools to provide and ensure compliance such as av, internal security scans etc.
Coordination and communication with client technical staff to prepare assessment reports, briefing and action reports in response to identified security events, tailoring analysis and options for the client operational environment.
Skills:
Experience with various technology solutions and platforms is desired but not essential to succeed in this positionThe desire and ability to learn and become a subject matter expert is expected.
Foundational knowledge of microsoft windows and linux/unix
Knowledge of aws (athena, lambda) and azure
Understanding of python, json and windows logging
Conversational knowledge of sigma, helk, elk, yara open-source projects
Experience working with various infrastructure tools/technologies such as sccm, gpo, active directory/kerberos
Experience with anti virus (preferably sophos), jira (atlassian), pagerduty, gsuite, and jumpcloud/okta.
Experience with vulnerability scanners like nessus, mvm, qualys, etc.
Knowledge of networking protocols and technologies, e.gTcp/ip, firewalls, routers, etc.
Understanding of infrastructure security and its impact on security operations, vulnerabilities, reporting, analytics and monitoring.
Broad knowledge of security best practices, security solutions, and methodologies for conducting advance security assessments, to include manual assessments and malicious user testing
Knowledge and understanding of network protocols, network devices, multiple operating systems, and secure architectures.
Knowledge of current cyber threats and the associated tactics, techniques and procedures used to exploit computer networks.
Qualifications:
Reside in the greater washington d.cOr remote
Bachelor’s degree or 4 years of relevant work experience
Minimum of 4-7 years of experience in roles related to network engineering/systems administration.
Performing cyber security analysis, process and procedures desired (but not required)
Willing to work shifts to support 7/24 operations, including weekend and on-call coverage
Compensation & benefits
Competitive salary
Full range of benefits, including 401(k) and medical, dental & vision coverage
Flexible “personal time off (pto)” plan and 10+ paid holiday days per year
Contact us
Apply for this role at qomplx.com/careers
Security support analyst
