Offensive Security Analyst

Primary Responsibilities:
• Plan, conduct, and document iterative, hypothesis-based threat hunts.
• Analyze and investigate anomalies for potential risk across the full spectrum of cyber threats.
• Review and analyze Security Information and Event Management (SIEM) alerts to develop hunt hypotheses.
• Propose, discuss, and document custom searches for automated detection of threat actor activity based on hunt findings.
• Utilize open-source intelligence to inform hunt hypothesis development.
• Track and document cybersecurity incidents from detection to resolution.
• Provide computer forensic support during investigations, including evidence seizure, computer forensic analysis, and data recovery.
• Conduct malware analysis including static and dynamic analysis of complex malware.
• Proactively assess the compute environment for patterns and anomalies, tagging events for Tier 1 & 2 monitoring.
• Collect and analyze data from compromised systems using EDR agents and custom scripts.
• Attend daily Agile Scrum meeting and report progress on activities.
• Support the development of deliverables including Hunt Hypotheses, Hunt Reports, Detection Logic, and Incident Reports.
•
Respond to cybersecurity major incidents and assist with mitigation, remediation, and post incident reviews.
Knowledge & Skills Required:
• Minimum of 5 years of experience in cybersecurity threat hunting or incident response roles.
• Proficiency with threat hunting methodologies, tools, and techniques.
• Experience with IT Service Management ticketing systems (ServiceNow preferred).
• Strong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory.
• Advanced knowledge of Security Information and Event Management (SIEM) systems.
• Experience with Endpoint Detection and Response (EDR) agents such as CrowdStrike.
• Ability to conduct malware analysis, including static and dynamic analysis.
• Excellent communication and teamwork skills.
Education Required: High school or GED
Education Preferred:
• Bachelor’s degree in computer science, computer engineering, software engineering, cybersecurity, or related field.
• Cybersecurity focused certifications such as GCIA, GSEC, GMON, Security+
Experience:
5-8 years