Note: The job is a remote job and is open to candidates in USA. ePlus inc. is a company that values technology as a people business and is seeking a Security Analyst. In this role, you will be responsible for day-to-day security monitoring, incident response, and managing detection technologies to protect the company’s information assets.
Responsibilities
- Perform front line monitoring, security event response, triage, remediation and recovery activities for security events affecting ePlus’ information assets
- Perform proactive and reactive incident response lifecycle activities, including detection, triage, analysis, containment, eradication, recovery and reporting
- Leverage a variety of information sources and indicators, including SIEM technologies, system log and network flow data, manual reports and observations, to differentiate between non-consequential events and those that require further investigation and or incident response activities
- Functions as incident handler to rapidly contain and correct identified issues and events, escalating as necessary and minimizing the potential for events to evolve to the level of a significant incident
- Assist with the selection, deployment, operation, administration, and maintenance of security event detection and related technologies
- Provide routine reporting on security event and incident handling activities
- Contribute to the evolution and continuous improvement of technical solutions, process/procedures, and documentation for incident response, threat intelligence, advanced persistent threat detection and vulnerability analysis
- Support and administer other areas of security, incorporating knowledge and insight gained to help evolve and adapt the security monitoring and incident response function
Skills
- Bachelor's degree in Computer Science, Information Technology or Business Management or equivalent work experience
- 3+ years of Information Technology experience
- 2+ years of relevant Information Security experience
- Experience performing vulnerability testing/management
- Relevant security knowledge and experience in two or more of the following: incident response/handling, malware analysis/response, network/host intrusion detection, vulnerability analysis/management, security operations
- Experience handling intake/response to potential information security events of interest
- Working knowledge of enterprise security detection technologies (e.g., IDS/IPS, packet capture/protocol analysis)
- Working knowledge of network protocols and operating systems (e.g., TCP/IP, Windows, Linux)
- Comfortable in high-pressure, time-sensitive situations; able to provide accurate information to guide decisions in crisis moments
- Able to adjust and present information to a variety of audiences - including technical, management, and business stakeholders
- Experience performing vulnerability testing/management
- SANS GCIH, GCIA, ISC2, and other security certifications
- Experience working in a Security Operations Center (SOC), Managed Services, or similar environment
Benefits
- Full range of medical, financial, and/or other benefits
- 401(k) eligibility
- Employee stock purchase program
- Various paid time off benefits such as vacation, sick time, and personal leave
- Details of participation in these benefit plans will be provided if an offer of employment is extended
Company Overview
Company H1B Sponsorship