[Remote] Cyber Threat Analyst III
Note: The job is a remote job and is open to candidates in USA. PlanIT Group, LLC is seeking a Cyber Threat Analyst III to enhance their cybersecurity efforts. The role involves monitoring cyber security events, performing triage on security escalations, and implementing automation use cases leveraging AI/ML capabilities.
Responsibilities
ā¢ Responsible for performing triage on all security escalations and detections to determine scope, severity, and root cause
ā¢ Monitor cyber security events, detecting incidents, and investigating incidents
ā¢ Identify, recommend strategies, develop, and implement automation use cases leveraging AI/ML capabilities
ā¢ Support deploying, configuring, testing, and maintaining Security Orchestration, Automation, and Response (SOAR) platform, and tools integrated with AI/ML capabilities to enhance threat detection, analysis and response
ā¢ Provide support to contract Program Manager, as necessary
ā¢ Effectively communicates technical information to non-technical audiences
ā¢ Influence others to comply with policies and conform to standards and best practices
Skills
ā¢ 7+ years of experience with security operations, threat hunting, and incident response
ā¢ Experience in analyzing alerts from Cloud, SIEM, EDR, and XDR tools, and alerts tuning process with preference on SentinelOne, Armis, and Splunk
ā¢ Experience in configuring network devices and analyzing network traffic
ā¢ Experience with Artificial Intelligence and Machine Learning (AI/ML) based security tools
ā¢ Experience in researching, developing, and implementing SOAR use cases
ā¢ Familiar with Security Orchestration, Automation, and Response (SOAR) platform
ā¢ Familiarity with cybersecurity operation center functions
ā¢ Experience configuring and re-configuring security tools, including SenintelOne and Splunk
ā¢ Experience implementing Security frameworks, such as MITRE Telecommunication&CK and NIST, and can interpret use cases into actionable monitoring solutions
ā¢ MUST have one or more of the following Certification(s): CISSP, CISA, CISM, GIAC, RHCE
ā¢ A minimum of eight (8) to twelve (12) years' relevant experience
ā¢ A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required
ā¢ Pass a client mandated clearance process to include drug screening, criminal history check and credit check
ā¢ All candidates must be a US Citizen or permanent status Green Card holder
ā¢ Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
Company Overview
ā¢ PlanIT Group is an IT and engineering professional services company which provides top-tier talent to various commercial and government customers. It was founded in 2010, and is headquartered in Charlotte, North Carolina, USA, with a workforce of 51-200 employees. Its website is http://planitgroup.com.
Apply Now
Apply Now
Responsibilities
ā¢ Responsible for performing triage on all security escalations and detections to determine scope, severity, and root cause
ā¢ Monitor cyber security events, detecting incidents, and investigating incidents
ā¢ Identify, recommend strategies, develop, and implement automation use cases leveraging AI/ML capabilities
ā¢ Support deploying, configuring, testing, and maintaining Security Orchestration, Automation, and Response (SOAR) platform, and tools integrated with AI/ML capabilities to enhance threat detection, analysis and response
ā¢ Provide support to contract Program Manager, as necessary
ā¢ Effectively communicates technical information to non-technical audiences
ā¢ Influence others to comply with policies and conform to standards and best practices
Skills
ā¢ 7+ years of experience with security operations, threat hunting, and incident response
ā¢ Experience in analyzing alerts from Cloud, SIEM, EDR, and XDR tools, and alerts tuning process with preference on SentinelOne, Armis, and Splunk
ā¢ Experience in configuring network devices and analyzing network traffic
ā¢ Experience with Artificial Intelligence and Machine Learning (AI/ML) based security tools
ā¢ Experience in researching, developing, and implementing SOAR use cases
ā¢ Familiar with Security Orchestration, Automation, and Response (SOAR) platform
ā¢ Familiarity with cybersecurity operation center functions
ā¢ Experience configuring and re-configuring security tools, including SenintelOne and Splunk
ā¢ Experience implementing Security frameworks, such as MITRE Telecommunication&CK and NIST, and can interpret use cases into actionable monitoring solutions
ā¢ MUST have one or more of the following Certification(s): CISSP, CISA, CISM, GIAC, RHCE
ā¢ A minimum of eight (8) to twelve (12) years' relevant experience
ā¢ A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required
ā¢ Pass a client mandated clearance process to include drug screening, criminal history check and credit check
ā¢ All candidates must be a US Citizen or permanent status Green Card holder
ā¢ Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
Company Overview
ā¢ PlanIT Group is an IT and engineering professional services company which provides top-tier talent to various commercial and government customers. It was founded in 2010, and is headquartered in Charlotte, North Carolina, USA, with a workforce of 51-200 employees. Its website is http://planitgroup.com.
Apply Now
Apply Now