DYOPATH, a leading Managed Service Provider (MSP), was founded to empower organizations by delivering trusted IT solutions. At DYOPATH, we pursue both purpose and success, knowing one will ultimately lead to the other. Our core values foster a culture that promotes accountability, excellence, exceptional customer service, and sustainability. Our team is passionate, fun, creative, and courageous in communications.

Location: Remote

Hours: Monday - Friday (8am - 5pm)

Salary: $85,000 - $100k (Depending on Experience)

Job Summary

Information Security Analyst with strong technical, analytical, interpersonal, and organizational skills to provide security support and expertise for clients located throughout the United States

Security Analyst with SOC coordination responsibilities is the first level for security investigations within the Security Department and interfaces directly with clients. The qualified candidate will have excellent customer service and a security-oriented mindset. The qualified candidate's background should include exposure to security technologies and concepts, including firewalls, IPS/IDS, logging, monitoring, and vulnerability management, and an understanding network and systems security practices.

Security Analyst with Penetration Testing execution responsibilities is the first level for security penetration testing of client environments. Interfaces directly with clients. The qualified candidate will have excellent customer service and a security-oriented mindset. The qualified candidate's background should include exposure to security technologies and concepts, including firewalls, IPS/IDS, logging, monitoring, and vulnerability management, and an understanding network and systems security practices.

Security Engineer security remediation, hardening, and implementation responsibilities are the first level for various technologies, including Windows, Linux, Azure, AWS, and others, as needed. Interfaces directly with clients to help plan and implement security remediation and implementation projects. The qualified candidate will have excellent customer service and a security-oriented mindset. The qualified candidate's background should include exposure to security technologies and concepts, including firewalls, IPS/IDS, logging, monitoring, and vulnerability management, and an understanding network and systems security practices.

Risk Analyst with GRC management and coordination responsibilities is the first level for security investigations within the Security and Risk Department and interfaces directly with clients. The qualified candidate will have excellent customer service and a security-oriented mindset. The qualified candidate's background should include exposure to security technologies and concepts, including firewalls, IPS/IDS, logging, monitoring, and vulnerability management, and an understanding network and systems security practices.

DYOPATH is a fast-paced, growth environment - to be successful the qualified candidate will need to be a pro-active individual, take direction well, communicate succinctly, and collaborate effectively.

Essential Functions And Responsibilities

Essential Duties and Responsibilities:

Act as an opening coordinator for security incidents
Validate, maintain, and execute a daily run book to provide contextual and added value to Security Operations Center as a Service clients and Penetration Testing as a Service clients. This includes interfacing with clients, providing excellent customer service and insights about trends from their monitored environment, and discussing industry trends.
Deploying and installing SIEM and EDR agents and building out deployment plans designed around customer needs.
Assist in coordinating needed operational remediation due to security incidents identified by the SOC Specialists who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email, and Phone).
Work with escalation contacts and SOC Specialists in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
Document incidents from initial detection through final resolution
Participate in security incident management and vulnerability management processes
Works as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats
Prepare monthly/weekly Security Reports for managed clients and continuously improve their content and presentation
Assist in the periodically test the effectiveness of security rules and alerts.
Work with stakeholders to gather input from clients to help tune and optimizing security systems, SOC security processes, procedures, and policies.
Work with stakeholders to apply recommended changes to SIEM correlation rules, customer security processes, and procedures.
Monitor emerging security threats via CISA and other government and vendors for notifications.
Maintain and opdate Incident Response, Technical Attack, Automation Playbooks, and other internal and interdepartmental documentation.
Other responsibilities and additional duties as assigned by the security management team
Provide communications, task assignment/tracking, reporting, and other activities as required to support responsibilities.
Review SOC and Red Team vendor documentation for relevant content to aid in developing processes, procedures, standards, and guidelines.
Create new documentation for processes, procedures, training materials, user guides, and web-based
content, release notes, internal and external presentations, etc.
Support the conduct of proof-of-concept efforts for the evaluation of security-related products.

Requirements:

Education Qualifications

Minimum two-year experience in computer hardware and software installation and maintenance desired
Personal interest in self-development of security skillset
Customer Service experience required
Sufficient interpersonal skills to become aware of and adjust to stakeholder communication preferences and styles, providing a client-centric experience
Experience in an IT environment
Capability to triage virus infections using anti-malware software
Conceptual or limited practical understanding of security monitoring experience with one or more SIEM technologies – computer Logs, Syslog, AlienVault, LogRhythm, Splunk, Sentinel, and intrusion detection and prevention technologies
- If possible:
Conceptual or some practical experience performing technical tasks associated with security engagements performing and documenting compliance analysis, determining remediation, and guiding remedial activities
One to two years in performing IT operations and/or administration.

Licenses, Certifications, And Other Requirements

Before hiring, a background check, including criminal record history, will be conducted. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant's suitability and competence to perform in the position.

Preferred Licenses, Certifications, and Other Requirements:

Security coursework or self-study toward certification highly recommended

Minimum Knowledge, Skills, And Abilities Qualifications

In order to perform the functions and responsibilities of the position (listed above) the following knowledge, skills, and abilities are essential.

A strong desire to learn more security topics independently of scheduled work hours.
Ability to carry out instructions provided in either written, diagram, or oral form
Work involves walking, talking, hearing, using hands to handle, feel or operate objects or controls, and reaching with hands and arms
Vision abilities required include close vision and the ability to adjust focus
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions
Demonstrated current broad-conceptual-based understanding of system architecture, computer technology, design, standards, and products based on both solid formal training and experience
Demonstrated skills in relationship building, oral and written communication, and people management
Conceptual understanding of using security scanning tools such as Nessus, Tenable
Conceptual understanding of using security tools such as SIEM and EDR
Conceptual understanding of using scripting languages, including PowerShell, Python, and traditional DOS batch.
Experience with troubleshooting network connection problems on smaller networks.
Experience with Web-based technologies (HTML, XML, JavaScript; Browser security; HTML5, AJAX, SOAP, etc.)
Experience with Microsoft Office.

Technical Knowledge:

Detail-oriented with strong organizational and analytical skills
Ability to set an agenda for meetings and keep meeting attendees moving to the agenda
Work independently and adjust to changing priorities, negotiator and consensus builder
Conceptual or Basic knowledge of IT including multiple operating systems and system administration skills (Windows, Apple, Linux)
Conceptual or Basic knowledge of EDR Technologies. (Cylance, Crowdstrike, Sophos, Cybereason)
Conceptual or Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise Anti-Virus products
Conceptual or Basic understanding of security incidents
Conceptual or Basic understanding of methods to analyze data, such as logs or packet captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents

Information Security Consciousness:

To protect the security of DYOPATH and its customers, it is necessary that this position perform duties in a security-conscious manner, and protects the privacy and confidentiality of company assets including but not limited to networks, business information and customer data. All DYOPATH employees are held accountable for the security of their specific job-related activities following company policy. Any DYOPATH employee who willingly and deliberately violates company policy will be subject to disciplinary action, including termination of employment and/or civil or criminal legal action.

Benefits

Medical, Dental, Prescription, Vision, Life and Disability Insurance
Flexible Spending Account (FSA) as well as Health Savings Account (HSA) – save money pre-tax for eligible medical expenses
Employee Assistance Program and Comprehensive Wellness Program
401 (k) Retirement Savings Plan with company match
PTO - Paid Holidays and Vacation Time – encouraging work-life balance
Continuous Learning and Development Programs
Employee Referral Programs
Pet Insurance plans
Bonus Incentive Programs
Growth opportunities

Equal Opportunity Employer

DYOPATH is committed to a work environment free of all forms of discrimination. DYOPATH recruits and hires without regard to age, color, disability, gender, gender identity, genetic information, marital status, military status, national origin, race, religion, sexual orientation, veteran status, or any other legally protected characteristic. For more information about DYOPATH, please visit our website at www.dyopath.com.The above information has been designed to indicate the general nature and level of work performed by employees in this classification. It is not designed to contain or to be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of the employee assigned to this job.

DYOPATH

New Jobs

Azure Systems Engineer II - Remote

Jr. Information Security Analyst

Jr. Information Security Analyst

Systems Administrator II

Security Analyst II