Note: The job is a remote job and is open to candidates in USA. 360 IDE is seeking an experienced IT Security Operations Analyst to monitor, analyze, and respond to security events across enterprise IT environments. The role focuses on incident response, forensic analysis, SIEM and threat detection, security monitoring, documentation, compliance, automation, and collaboration with technical and business stakeholders.
Responsibilities
- Monitor security tools and related inputs for alerts and potential security events, including AWS security monitoring tools, SIEM alerts, security operations email inboxes, and security group requests/incidents within the ticketing system
- Administer, maintain, and support one or more SIEM and threat detection systems and/or processes
- Perform security incident detection, response, containment, resolution, and recovery activities as assigned
- Manage security incident tickets and perform security event analysis, data collection, packet analysis, and related investigative activities
- Perform deep forensic and security incident response analysis across complex business systems
- Investigate security events across multiple operating systems, infrastructure platforms, and enterprise environments
- Support security monitoring, incident management, threat detection, and response processes
- Create and maintain thorough technical security documentation for IT systems, architecture, configurations, and environments
- Apply security best practices across enterprise platforms and infrastructure
- Support security audit activities and related compliance expectations
- Utilize scripting and automation to improve security operations and investigative processes
- Leverage AI as an engineering tool where appropriate to support data analysis and security investigations
- Collaborate with IT administrators, security teams, infrastructure teams, and business stakeholders to identify and address security risks
- Manage multiple concurrent assignments in a fast-paced environment
- Perform other duties and responsibilities as assigned
Skills
- 8 or more years of experience working on an IT security operations / incident response / engineering team in an analyst / engineer related role
- Deep forensic / security incident response analysis of complex business systems required
- Knowledge of security best practices across multiple platforms, including Linux, Windows, VMware, and Cisco IOS
- Strong knowledge of client and server operating system security tools, capabilities, configurations, logging, and patching, including Windows, Linux, and MacOS
- Working knowledge of public-key cryptography , including best practices and technologies for protecting data at rest and in transit
- Direct experience with information technology incident response, including incident management, security event analysis, and packet analysis
- Experience creating and maintaining thorough and technical security documentation for IT systems, architecture, and environments
- Strong scripting abilities using PowerShell, Python, Bash, Perl, etc
- Working knowledge of security audit processes and related expectations
- Strong verbal and written communication skills, with the ability to communicate security risks effectively to both IT administrators and non-technical staff
- Excellent analytical, design, and organizational skills, with strong critical-thinking and problem-solving abilities
- Ability to work effectively in a fast-paced environment while managing multiple concurrent work assignments
- Experience using AI as an engineering tool to help with data analysis
- Background / education in data science
- Bachelor's degree from an accredited university in Computer Science, Information Technology, CIS, or a computer-related field
- Professional certifications such as CISSP, Security+, CCNA, etc
- Experience with security monitoring, SIEM, threat detection, incident response, forensic analysis, and enterprise security operations
Benefits
- Remote work arrangement (USA)
Company Overview