Description
At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers. It's why we're coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we're headed. We're proud to share our story and Make Amazing Happen at CDW.
JOB SUMMARY:
The Security Analyst who provides dedicated technical client support such as, monitoring and analysis capability for SOC operations and Incident Response. The Security Analyst will conduct analysis of security events to include validation, investigation escalation and reporting of events of interest based on the guidelines and event handlers provided to them. The Security Analyst will be responsible for all such events of interest and will make sure they are continuously monitored and reviewed. The Security Analyst upholds defined service level agreements (SLA) and customer service excellence.
Key Responsibilities:
- Monitoring and analysis of cyber security events
- Fully operate from Cradle to Grave the incident response process.
- Excellent understanding about Windows and Linux OS internals.
- Excellent knowledge of protocols like HTTP, HTTPS, TCP/IP, WebSocket, SSH, SFTP, RDP etc.
- Good understanding of the industry models such as the Cyber Kill Chains, Diamond Model and MITRE ATT&CK framework.
- Practical hands-on experience analysing windows & Linux artifacts produced from digital forensics and incident response.
- Good understanding of cyber threat landscape, TTPs, threat actors and groups.
- Ensure Security Incidents are raised and managed in line with defined processes.
- To escalate incidents and appropriately manage and record them.
- Handling of security incidents and taking ownership.
- Proactively manage internal and external security services to identify threats to infrastructure and services including Log Management.
- Proficiency with the following tools:
- EDR
- Anti-Virus/NGAV
- HIPS, ID/PS, DLP, WAF
- SIEM - Log Rhythm, QRadar and Splunk
- Experience with SIEM technologies (Splunk etc), Threat hunting, monitoring and investigations.
- Communicate new ideas or suggestions for analysis/process improvement.
- Deep understanding of logging mechanisms of Windows, Linux platforms.
- Participate in a 24x7 (On-Call) coverage model to prevent and remediate security threats.
- Knowing how to Script in languages such as Python, Powershell, Bash to build incident response workflows and automation is a plus.
- Have excellent written and verbal communication skills.
- Possess good technical understanding, takes initiative to remain up to date with cyber security skills, and fosters an attitude of continual learning/adapting.
- Possess the ability to adjust and adapt to changing priorities in a dynamic environment.
- Knowledge of and experience with Palo Alto, Checkpoint or Cisco firewalls is a plus.
- Ability to work with minimum guidance.
Experience:
Security Operations Centre (SOC) environment experience with at least 3+ years of experience detecting and responding to cyber intrusions in an Operations Technology environment.
Bachelor's degree or equivalent combination of education and 3 years of experience in computer science, computer engineering, or related field.
Certifications:
List of Certificates are knowledge equal to it.
SANS GIAC; GCED; GCIH; GCFA; GREM; GIAC GOLD. ISC CCFP; CSIH. EC Council ECSA; CHFI; ECIH, CompTIA CYSA+; Sec+, N+, Palo Alto, Cisco and Checkpoint certificates
It's good to have at least anyone of the above listed certs "is a plus", but not mandatory.
Physical Requirements, If Applicable:
• Provide 24x7 support coverage and work on weekends and STATE Holidays.
• General Office Duties.
We make technology work so people can do great things.
CDW is a leading multi-brand provider of information technology solutions to business, government, education and healthcare customers in the United States, the United Kingdom and Canada. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. Together, we unite. Together, we win. Together, we thrive.
CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law.
