Cyber Security Analyst

Sourcepass is seeking a Cyber Security Analyst to join their Security Incident Response department. This role involves monitoring and maintaining the security of clients by triaging incoming alerts and responding to non-complex security events, while escalating more serious issues to senior staff.

What you'll do:

• Monitor incoming alerts, reports, and metrics from a variety of systems to perform triage
• Perform minor response to non-serious, non-complex events (malware, data leakage, account misuse, etc.)
• Perform automated or manual patching of discovered vulnerabilities or misconfigurations
• Escalate more serious or complex events to senior security team staff
• Clearly explain event sources and resolutions to clients
• Clearly document steps taken
• Follow documented procedures to drive resolution
• Make recommendations for improvements to processes and tools

What they're looking for:

• Willingness to learn and improve both core function skills and potential additional security role skills
• Both strong written and strong verbal communication skills, both internally and client-facing
• Basic understanding of SOC practices and processes
• Strong understanding of incident response practices and processes
• Strong understanding of the Windows operating system (Linux and Macintosh a plus)
• Strong understanding of the Windows ecosystem (Active Directory, Azure, Microsoft365)
• Experience with ticketing and tracking systems
• Basic knowledge of networking protocols and topologies, as well as network analysis
• Basic understanding of malware analysis
• Analytical, problem solving, critical thinking skills
• Basic understanding of OS and network auditing
• Knowledge of scripting languages (PowerShell, batch, etc.) a plus