Job Description
Security Analyst – The Solenis Security Analyst (SSA) has a wide variety of skills, including implementing and administration tasks, performing intrusion analysis, a deep understanding of the 18x5 security monitoring environment. The SSA is an important role Solenis’ IT Security Department. The SSA role requires defense against cyber threats by identifying and triaging security incidents. The ideal person in this role brings experience enhance security tools configuration and investigating network and endpoint intrusions within the Security Operations Center (SOC).
The SSA will triage event, perform escalations and coordinate incident response procedures. This role must be able to solve complex problems independently and know when to escalate issues to senior IT Security Leads and Managers. This individual will work with multiple technology platforms and interface with other groups within IT Security Operations.
The Solenis Security Analyst (SSA) for the SOC will be responsible for responding to critical threats that impact information security at Solenis. This individual's role includes the following functions
Roles and Responsibilities:
- Expertise in implementing and administrating EDR policies, Rules creation, and Incident/alert management.
- Expertise in Deploying and administrating in SIEM platform, Log Ingestion, correlation, and aggregation rules configuration.
- Proficient in configuring and administrating Email Security solutions Including DMARC, inbound and outbound rules
- Develop and implement email security policies and best practices to safeguard against threats such as phishing, malware, and data breaches.
- Good experience in security tools migration and integration areas.
- Good experience in security Incident response and investigation to identify the root cause of security breaches and gather evidence.
- Hands-on experience with Automation (SOAR) and Custom KQL queries.
- Develop and update incident response plans and playbooks to ensure effective handling of various types of incidents.
- Design and enforce DLP policies and rules to prevent unauthorized data access, sharing, and transmission.
- Deep technical experience in vulnerability management and administration
- Collect and analyze threat intelligence to stay informed about emerging threats and vulnerabilities relevant to the organization.
- In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, Malware investigation, web Proxy and network concepts etc.
- Engage in research and development of security solutions, testing new tools and methods for potential implementation.
- Creating metrics for a Security Operations Center (SOC) measuring its effectiveness and identifying areas for improvement.
