Cyber Analyst

Foreign Resource Development Associates, LLC
Nashville, TN, United States
about 1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience required
1 year minimum
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Amazon Web Services Data Analysis Microsoft Azure Query Languages Domain Name System (DNS) Hypertext Transfer Protocols (HTTP) Python (Programming Language) Log Analysis Phishing Kusto Query Language Security Information and Event Management
+9 more
TCP/IP Scripting Cloud Platform System Mitre Att&ck Malware Cyber Threat Analysis Git Splunk Software Version Control

Job description

FRDA is seeking a Cyber Intelligence Analyst to enable Security Operations Center (SOC) and Incident Response (IR) teams to proactively defend against threats. Analysts will efficiently and accurately triage alerts to reduce false positives and develop scripts that reduce manual investigation time. Clear, actionable incident documentation and non-technical updates will be routinely created to improve detection coverage and alert quality and inform senior stakeholders for their decision processes.

Requirements

Do you have experience in Security data analysis?, * A minimum of one (1) year of experience in a Security Operations Center (SOC), incident response, or cybersecurity operations role.

  • Working knowledge of security concepts:

  • Networking (TCP/IP, DNS, HTTP/S)
  • Common attack techniques (phishing, malware, lateral movement)
  • Hands-on experience with security tools:

  • SIEM (e.g., Splunk, Sentinel, CrowdStrike NG-SIEM)
  • EDR/XDR platforms
  • Mimecast

  • Proficiency in at least one programming/scripting language (Python strongly preferred).
  • Ability to write scripts to parse data, call APIs, and automate tasks.
  • Strong analytical and problem-solving skills., * Experience with log analysis and query languages such as SPL and KQL.
  • Familiarity with the MITRE ATT&CK framework.
  • Exposure to SOAR platforms or workflow automation tools.
  • Basic understanding of cloud environments (AWS, Azure, or GCP).
  • Experience with version control systems such as Git.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:01 min

Bridging the gap between software development and security

Vandana Verma · LIVE

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

6:21 min

Investigating push inefficiencies with upstream Git experts

Jonathan Creamer · Coffee With Developers

3:50 min

Queues in TCP stacks and continuous network connections

Clemens Vasters Clemens Vasters · WWC 2022

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

Videos

See all

Related articles

See all