Job Description

Title: Threat Intelligence Analyst / Threat Analyst

Location: Houston TX / Any where in Texas who is ok travel when required

Duration: Full Time

Job Description:

Primarily focused on security operations, threat intelligence and incident response. Will respond to security alerts, perform threat hunting and escalate critical alerts. Will help enhance and optimize the threat intelligence platform and incident response processes. Will also help with tuning and optimization of security events and alerts.

Experience/Skills:

• Must have proficiencies:

• Experience & advanced knowledge & understanding of threat TTP’s (tactics, techniques & processes) and MITRE framework
• Experience & advanced knowledge of threat hunting and incident response processes (identification of critical vs informational alerts)
• Experience in building detection use cases
• Experience with Splunk
• Understanding of User Authentication, Endpoint and Network / Firewall security events and baselining

• Desirable proficiencies:

• Carbon Black Endpoint Security
• Microsoft Defender Suite
• Email security tools like Avanan or Proofpoint
• Qualys
• MISP (Malware Intelligence Sharing Platform)

Competencies:

• Must be security minded and well versed in security principles and best practices
• Professional security certifications are a plus (CISSP, GIAC, or relevant product certs)
• Ability to work effectively with limited direction and guidance
• Strong analytical, organizational and time management skills
• Ability to communicate clearly and effectively

͏

Do

• Ensuring customer centricity by providing apt cybersecurity 

• Monitoring and safeguarding the log sources and security access
• Planning for disaster recovery in the event of any security breaches
• Monitor for attacks, intrusions and unusual, unauthorized or illegal activity
• Performs moderately complex log reviews and forensic analysis to identify unauthorized or unacceptable access to data or systems
• Conduct security assessments, risk analysis and root cause analysis of security incidents
• Handling incidents escalated by the L1 team in 24x7 rotational shifts
• Use advanced analytics tools to determine emerging threat patterns and vulnerabilities
• Completing all tactical security operations tasks associated with this engagement.
• Analyses all the attacks and come up with remedial attack analysis
• Conduct detailed analysis of incidents and create reports and dashboards

• Stakeholder coordination & audit assistance

• Liaise with stakeholders in relation to cyber security issues and provide future recommendations
• Maintain an information security risk register and assist with internal and external audits relating to information security
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
• Advice and guidance to employees on issues such as spam and unwanted or malicious emails

͏

Deliver

͏

͏