[Hiring] Trust Operations Analyst @DigiCert

Role Description

The Trust Operations Analyst will help advance the security operations of DigiCert by identifying potential risks and threats through real-time log analysis. This position will work on security incidents as they arise with the team.

• Provide analysis of security threats and problems.
• Management and evaluation of security alerts and detections.
• Work through tickets and resolve tickets per defined SLAs.
• Participate in Security Incident Response and analysis of incidents.
• Assist in the configuration, management, and maintenance of various security-related software and systems.
• Effectively work within a team and be self-sufficient/self-motivated when assigned solo work.
• Stay current on emerging threats, vulnerabilities, audit framework updates, etc., to help protect DigiCert’s systems.
• Evaluate new tools to improve efficiencies in operational processes.
• Actively participate in ongoing training and knowledge transfer with team members.
• Provide metrics and statistics to management.
• Critically assess current practices and provide feedback to management on improvement opportunities.
• Understand policies and standards and convey those requirements to end users.
• Set clear expectations and provide timely follow-up as appropriate.
• Provide audit support for Compliance.
• Other duties and responsibilities as assigned.
• Willing to work incident response as necessary and collaborate with other groups when this occurs.

Qualifications

• 3+ years of experience in Information Technology or related technical discipline.
• Advanced level of knowledge of Information Security design concepts and principles.
• Strong written and verbal communication skills.
• Customer Service background and good interpersonal and organizational skills.
• Ability to perform in-depth log analysis.
• Experience responding to security incidents in the past.
• Ability to look at logs and understand the systems that could be affected.
• Willingness and ability to obtain CISSP certification if not already completed.

Requirements

• Master’s degree in a technical discipline (preferred).
• 2+ years of experience in Information Security (preferred).
• 2+ years of experience with SIEM technologies (preferably Splunk).
• Experience with cloud-based identity providers, SSO, SAML, etc.
• Experience with zScaler products.
• Experience with Web Application Firewall and DDoS protection.
• Experience with web application security technologies.
• Experience with vulnerability management software (preferably Tenable).
• Experience with endpoint detection and response software (CrowdStrike preferred).
• Experience with scripting languages (Python, Go, PHP, Powershell, Bash, etc.).
• Experience with Help Desk.
• Knowledge of penetration testing practices and principles.
• Certified Information Security Professional (CISSP).

Benefits

• Competitive compensation and comprehensive health, dental, and vision coverage.
• Retirement savings programs with company matching (401(k) or RRSP).
• Generous paid time off, including holidays, and vacation.
• Paid parental leave and family support benefits.
• Life and disability coverage.
• Flexible spending and health savings options (where applicable).
• Health and wellness support, including gym reimbursement and wellness programs.
• Employee Assistance Program with 24/7 confidential support for employees and families.
• Education assistance and professional development opportunities.
• Access to LinkedIn Learning and continuous learning resources.
• Employee referral bonus program and additional company perks and discounts.
• Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues.
• Business travel insurance and global employee support programs.