Security Analyst, Managed Detection & Response

Why you should join our At-Bay Managed Detection and Response Security team:At-Bay is a fast-growth InsurSec company (Insurance x Cybersecurity) on a mission to bring innovative products to the market that help protect small businesses from digital risks. As an InsurSec provider, we uniquely combine insurance with mission-critical security technologies, threat intelligence, and human expertise, to bridge the critical security capability gap that exists among SMBs in the community. We believe InsurSec is an $80B market opportunity and we are excited to introduce the Security Analyst (MDR) role to the security team in order to help expand our reach and influence in the business and security community, of which we serve 35,000 customers.With At-Bay, our customers experience 5X fewer ransomware attacks. This is just the tip of the iceberg! Click here to learn more about what we're building. Security Analysts provide first-line security monitoring services to At-Bay’s Managed Detection & Response customers with specific responsibilities including:Operation and tuning of security monitoring tools including Endpoint Detection & Response (EDR), network monitoring, email security, Data Loss Prevention (DLP), Security Information and Event Management (SIEM), security automation tools, and others as neededIdentification and analysis of anomalous activity in customer technology environmentsTriage of event data to identity potential indicators of compromiseEscalation of potentially malicious activity to engage incident responders where necessaryParticipation in incident investigation, containment, remediation, and recovery activities where necessaryDeveloping and maintaining customer relationships to facilitate delivery of MDR servicesDeveloping and delivering reports on identified activity to customer stakeholders as neededKey skills:Previous EDR, MDR, XDR, security monitoring, or incident response experienceStrong oral and written communications skillsPrevious hands-on experience performing security operations including several of the following:Security monitoring using a variety of endpoint and network toolsDeployment, tuning, and operation of security tools from vendors such as CrowdStrike, SentinelOne, and othersDeployment, tuning, and operation of SIEM or other tools used to aggregate and analyze security-relevant dataTriage and analysis of potential indicators of compromisePerforming rapid response to contain and/or remediate potentially malicious activityDevelopment and analysis of cyber threat intelligenceParticipation in investigations involving digital evidenceIntrusion detection / cyber threat huntingMalware analysisPrevious hands-on experience working in information technology operations (e.g., Network Operations Center, Security Operations Center, Incident Response Team, etc.)Minimum requirements:Bachelor’s degree or equivalentMinimum of 2 years of experience in cybersecurity operations, incident response, or another security disciplineWillingness to travel as needed to perform job functionsPreferred requirements:Significant undergraduate or graduate coursework in computer science, computer engineering, information systems, or cybersecurityPreferred candidates will have a mix of cybersecurity experience including either security operations or security engineering / architectureKnowledge of cloud environments including knowledge of cloud security products and services offered by major cloud service providers (e.g., AWS, Azure, Google)One or more industry cybersecurity certifications (e.g., GCIH, Security+, CISSP, etc.)Work location:USA, nationwideOriginally posted on Himalayas