Note: The job is a remote job and is open to candidates in USA. Centric Software is a global leader in providing an innovative product-concept-to-commercialization platform for various industries. They are seeking a Security Analyst II to design, implement, and enhance enterprise-wide security operations, focusing on advanced monitoring, incident response, and vulnerability management.
Responsibilities
- Advanced Security Monitoring and Analysis: Oversee the continuous monitoring and in-depth analysis of network traffic, system logs, and security alerts, employing cutting-edge SIEM Palo Alto Cortex solutions and leveraging advanced threat intelligence feeds to detect and respond to sophisticated cyber threats
- Collaborate on the design and integration of advanced security technologies, specifically focusing on DLP, Zero Trust, Web Filtering, and the transition toward a SASE-based network architecture
- Incident Response: Develop, refine, and lead the execution of advanced incident response plans and procedures, orchestrating multifaceted incident handling activities with a focus on rapid containment, eradication, and recovery. Serve as the ultimate technical authority during high-stress security incidents
- Vulnerability Assessment and Management: Assist identification and prioritization of vulnerabilities across our intricate technology stack, conducting comprehensive vulnerability assessments and overseeing advanced remediation efforts, including penetration testing and code review
- Engineer and maintain robust security controls across CrowdStrike EDR, email security platforms (Proofpoint/Microsoft), and MDM for comprehensive endpoint and identity management
- AWS, Azure, and GCP Security: Utilize your knowledge of AWS, Azure, and GCP security best practices to assess and enhance the security of cloud environments. Implement and maintain security configurations, identity and access controls, and encryption mechanisms specific to each cloud platform
- Optimize enterprise-wide security training programs focused on mitigating high-risk data exfiltration avenues, educating the workforce on preventing data leakage and identifying insider threat indicators
- Conduct security assessments and audits to identify vulnerabilities and provide recommendations for remediation
- Threat Intelligence: Maintain an understanding of emerging cybersecurity threats and trends, integrate advanced threat intelligence into security operations to drive proactive threat detection and support the development of custom threat-hunting methodologies
- Security Automation and Tooling: Spearheaded the development and deployment of highly sophisticated scripts, automation tools, and custom security solutions to optimize and streamline complex security tasks, enhance operational efficiency, and enable rapid response to evolving threats
- Compliance and Technical Auditing: Ensure rigorous compliance with relevant cybersecurity regulations and standards, manage technical audits, conduct advanced assessments, TPRM, and deliver insights to maintain and elevate compliance efforts
- Collaborate closely with cross-functional teams, providing technical guidance and fostering a culture of advanced cybersecurity within the organization
Skills
- 5-7 Years of experience in security operations, cloud security controls, and incident response capabilities
- Experience with advanced security monitoring and analysis, including SIEM Palo Alto Cortex solutions
- Knowledge of DLP, Zero Trust, Web Filtering, and SASE-based network architecture
- Experience in developing and leading incident response plans and procedures
- Ability to conduct comprehensive vulnerability assessments and oversee remediation efforts
- Experience with CrowdStrike EDR, email security platforms (Proofpoint/Microsoft), and MDM
- Knowledge of AWS, Azure, and GCP security best practices
- Experience in optimizing enterprise-wide security training programs
- Ability to conduct security assessments and audits
- Understanding of emerging cybersecurity threats and trends
- Experience in security automation and tooling
- Knowledge of compliance with relevant cybersecurity regulations and standards
- Ability to collaborate with cross-functional teams and provide technical guidance
- GCIH (GIAC Certified Incident Handler)
- GCFE or GCFA (forensics)
- GCIA or CySA+
- Security +
Company Overview
Company H1B Sponsorship