SENIOR Information Security Analyst (level-3)
Note: Must be authorized and wiling to work on W2. Can't do C2C or Corp-Corp or 1099
Location: Must be 60 miles from Ashburn VA, Cary NC, or Temple Terrace FL-Monday through Friday, Onsite Hybrid- 2 days in office.
As an expert in security event analysis, incident handling, and proactive threat management, you will provide advanced consultative support and ensure the smooth operation of security activities across the team.
You’ll guide analysts daily in this role, resolving complex security issues. Although you won't be directly involved in the daily analysis of new threats, your expertise will provide context, consultation, and decision-making for timely resolutions. You will maintain and fine-tune the security analytics platform, including configuration adjustments and use case development.
Additionally, you will engage in proactive threat hunting, security system analysis, and research to ensure the organization stays ahead of emerging threats.
Key Responsibilities
- Lead and consult with Tier II SOC Analysts, providing expert insight and feedback on pertinent security incidents.
- Oversee complex escalations and coordinate technical troubleshooting with customers and other Client teams.
- Conduct proactive security system analysis, including policy evaluation, tuning, and recommending improvements.
- Perform SIEM tuning, content creation, and analysis, including advanced use case development and modifications.
- Manage high-priority security incidents, perform historical security reviews, and offer expert feedback to improve incident response processes.
- Create and maintain security documentation
- Drive process improvement initiatives.
- Lead the response and resolution of escalated threats, including proactive threat research and threat hunting.
Must Have
- Three or more years of relevant work experience as a security analyst, SIEM software and managing use cases.
- Proven experience with scripting, parsing, and query development for security solutions.
- Experience with threat-hunting techniques and advanced threat research.
- Robust documentation, communication, and process improvement skills.
- Excellent communication and interpersonal skills
Nice To Have
- SIEM and SOAR solution design/architect experience (e.g., Microsoft Sentinel, Cortex XSOAR).
- ITIL certification.
- Industry-recognized security certifications such as CISSP, SANS, and/or GIAC.