Security Operations Tier 1 Analyst
About the position As a Security Operations Tier 1 Analyst, you will serve as the first line of defense against cyber threats to the organization by monitoring and responding to security alerts received from various sources. You'll investigate security alerts and escalate as needed to senior team members. You will perform regular maintenance and upgrades to security systems and assist in the development of internal policies, procedures and playbooks to ensure accuracy and consistency in the handling of security matters. You will also generate reports and analyze data to support security programs. This position works second-shift. The standard work hours for this role depending on business needs are 1:30pm-10:00pm, Sunday-Thursday. Responsibilities • Monitor and analyze security alerts generated by various sources (SIEM, Firewall, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC) and other client data sources) to identify true positive security concerns and take appropriate actions to defend the organization's assets from potential threats. Escalate security alerts to senior team members for further investigation and/or resolution as appropriate. • Conduct regular maintenance and upgrades to maintain security technologies and solutions that protect the integrity, confidentiality, and availability of information systems and data. • Write and review incident response procedures and playbooks to ensure accuracy. Identify and provide recommendations to senior team members on opportunities to improve incident response procedures. • Respond to Associate queries regarding SOC-managed platforms. • Generate metric reports for management and team members to measure program success and aid in decision making. Identify basic security concerns within the reports. • Participate in an on-call rotation which includes nights and weekends. • Manage well-defined, limited scope projects to improve Sentry's information security posture. • Collect and analyze data regarding threat hunting and intelligence initiatives to support the proactive identification of security concerns. Share data and findings with senior team members. • Develop and maintain knowledge on the company's security goals, policies, and standards. Actively work to uphold those goals. • Develop and maintain processes for tracking and monitoring SOC workloads. Analyze results and provide recommendations to management on opportunities to improve processes, create efficiencies, and modify training. • Assist security's investigation team, as necessary, with basic computer forensics and data delivery. Requirements • Associate's Degree in a Cybersecurity field or one year of relevant experience Nice-to-haves • Bachelor's Degree in Cybersecurity or related field is beneficial Benefits • Sentry is happy to offer flexibility through a scheduled Hybrid work model. Monday and Friday work from home if you choose to, Tuesday through Thursday you'll work in office. • As a Sentry associate, you will have an in-office workspace and materials for your home office. In addition to the laptop, you will receive prior to your start, Sentry will provide equipment for your home office. • Meal Subsidy available for associates who report to an office. • 401(K) plan with a dollar-for-dollar match on your first eight percent, plus immediate vesting to help strengthen your financial future. • Continue your education and career development through Sentry University (SentryU) and utilize our Tuition Reimbursement program • Generous Paid-Time Off plan for you to enjoy time out of the office as well as Volunteer-Time off • Group Medical, Dental, Vision, Life insurance, Parental leave, and our Health and Wellness benefits to encourage a healthy lifestyle. • Well-being and Employee Assistance programs • Sentry Foundation gift matching program to encourage charitable giving. Apply tot his job