Junior Cyber Security Analyst I (Security Operations Analyst)

This role supports IT Security Operations by monitoring events and logs across Information Technology, Cyber Security, and Physical Security data feeds, and building analytics based on adversarial behaviors. The position requires independent investigative capability, strong collaboration, and strict adherence to accuracy, timeliness, confidentiality, and professionalism., * Perform daily monitoring and investigative activities while on shift

• Assist with processing cases requiring forensic analysis to validate findings, produce threat intelligence, or fulfill HR/Legal requests
• Analyze threat reports for value and content development opportunities
• Maintain awareness of current and relevant threat landscapes
• Provide feedback and recommendations to enhance existing SOC processes and content
• Assist with implementation of process improvements
• Engineer and enrich data to improve analytic capabilities
• Research open-source and commercial technologies to improve SOC capabilities
• Prepare case documentation and forensic reports
• Maintain current technical knowledge on assigned technologies
• Support SOC metrics, reporting, and communications
• Collaborate with other security teams
• Participate in and lead designated SOC projects

• Security information and event monitoring functions utilizing a Security Information and Event Management (SIEM) tool
• Open-source tools
• Forensic tools
• Threat intelligence platform (TIP)
• Security Orchestration, Automation and Response (SOAR) platform
• Big data solutions
• Security incident detection, triage, investigation, and remediation
• Understanding of Python, PowerShell, and Bash scripting functionality
• Understanding of Linux and Windows operating systems
• Understanding of networking concepts and technologies
• Understanding of adversarial techniques and MITRE ATT&CK framework
• Basic understanding of statistics
• Ability to independently research solutions using open-source information
• Strong written and verbal communication skills
• Creative problem-solving ability
• Ability to work independently and within a team environment
• Ability to handle confidential information
• Self-directed learner
• Organized and adaptable in a changing environment
• Able to work with minimal supervision
• Ability to troubleshoot and work through technical problems, * Associate’’s Degree in Computer Science, Information Security, or related field preferred
• Bachelor’’s Degree preferred
• In lieu of degree: Associate’’s Degree in another discipline plus 2 years of relevant cyber/information security experience will be considered

Preferred Skills

• Certifications such as Security+ and CySA+ (preferred but not required)
• Home labs, Hack The Box, TryHackMe, GitHub projects, and other self-driven learning activities, * Network Monitoring
• Cybersecurity Monitoring
• Incident Response
• Utility industry experience
• Operational Technology (OT) / Industrial Control Systems (ICS) security
• Prior cybersecurity experience
• Security certifications