[Hiring] Senior Detection & Response Analyst @PROLIM Global Corporation

Role Description

The Senior Detection & Response Analyst will provide ongoing support to the Regional Security Operations program. In this role, you will maintain effective 24x7 monitoring and detection services for internal and external clients while leading incident detection, threat analysis, and response activities.

• Act as the point of escalation for all security incidents; provide expert level feedback regarding current monitoring and ways to improve it.
• Assume the role of shift lead as needed, and fulfil this responsibility through leadership and guidance of ID team members, proactively prioritizing, identifying, analyzing and remediating threats.
• Ensure that the ID Analysts' daily work activity is completed to the required quality levels and timelines by verifying that their responsibilities are executed in accordance with the expectations set by the ID Team Lead.
• Triage security incidents and perform in-depth analysis using Cyber Threat Intelligence, intrusion detection systems, firewalls and other boundary protection devices.
• Maintain an understanding of the overall threat landscape (cyber, malware, botnets, phishing, DDoS, physical).
• Provide 24x7 coverage to support the RSOC services; participate in an on-call rotation.
• Support Agentic SOC development through providing expert level feedback, tuning, and feature requests for the engineering team to support accurate machine speed response.
• Train and mentor team members within the Incident Detection Team.
• Improve the effectiveness and efficiency of day-to-day operations.
• Assist with service requests from customers and internal teams.
• Assist with containment and remediation of threats during incidents. Use an internal ticketing system to track investigated incidents and capture relevant details.
• Support Incident Response efforts as needed, including providing counsel, working with the IR team, as well as other involved stakeholders within the organization and customers to drive forward remediation activities.
• Conduct threat hunting activities based on internal and external threat intelligence.
• Create and update daily and monthly reports.
• Contribute to the creation of documentation to standardize processes and procedures, including playbooks to improve internal processes and procedures.
• Use investigation findings to identify gaps and recommend security posture improvements.
• Identify, recommend, coordinate, and deliver timely knowledge to support teams.

Qualifications

• 8+ years of experience in Security Operations monitoring.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field (preferred).
• Experience with Security Operations processes, procedures, and services.
• Experience working with cybersecurity tools and software such as:
  • Microsoft Sentinel
  • Splunk
  • ATP
  • Symantec Endpoint
  • Trend Micro Antivirus
  • McAfee Web Gateway
  • Check Point Firewalls
  • Bluecoat
  • Sourcefire
  • Active Directory
  • Relevant cybersecurity platforms
• Advanced knowledge of network monitoring and network exploitation techniques.
• Strong technical background in security, networking, infrastructure, cloud, and applications.
• Knowledge of risk assessment tools, technologies, and methods.
• Experience with common attack vectors, including advanced adversaries (nation-state and financially motivated).
• Knowledge of common web application attacks, including SQL injection, cross-site scripting (XSS), invalid inputs, and forceful browsing.
• Knowledge of network protocols and applications, including DNS, HTTP, and SMB.
• Technical certifications such as GCIA, GCFA, GCIH, or CASP are a plus.
• Experience with Tines or other security automation platforms is highly preferred.
• Proficient with Microsoft Office (Word, Excel, PowerPoint) and documentation.

Core Competencies

• Excellent critical thinking, logical reasoning, and solution-oriented mindset.
• Ability to learn quickly and adapt in a dynamic environment.
• Strong analytical and problem-solving skills.
• Detail-oriented with excellent organizational skills.
• Strong verbal and written communication skills.