Cyber Security Analyst

Clarivate - Philadelphia, PA

Full-time - Mid Level

Hybrid - Philadelphia, PA

11-50 employees

Professional, Scientific, and Technical Services

About the position

We are looking for an enthusiastic and creative Cyber Security Analyst to join our Cyber Security Team. In this role, you will work with industry-leading security tools and technologies. The team consists of 33 security professionals who report to the Chief Information Security Officer. Our focus is on many aspects of security, including Security Operations, Vulnerability Management, Secure Development, Threat Modelling, and Identity and Access Management. We would love to speak with you if you have skills in alert triaging and log analysis. In this advanced role, you will be responsible for safeguarding our organization's information systems. Using foundational cybersecurity knowledge, you will play a key part in identifying and mitigating complex security threats and vulnerabilities. You will work closely with senior analysts and management to contribute to the development and implementation of security policies, procedures, and controls to enhance our overall security posture. Additionally, you will play a key role in the triaging of security incidents and assist more junior team members with escalations. The Cyber Security Team is composed of professionals from various walks of life with diverse experience, spread across North America, Europe, and Asia. We support our organization's internal teams and customer relations activities. The manager for this role is located in North America. As a security team, our focus lies in four main areas: Security Engineering and Operations, Product Security, Security Architecture, and Governance Risk and Compliance.

Responsibilities

• Identify and mitigate complex security threats and vulnerabilities.
• Contribute to the development and implementation of security policies, procedures, and controls.
• Triage security incidents and assist junior team members with escalations.
• Conduct in-depth analysis of security alerts and incidents to determine root cause and impact.
• Lead investigations into security breaches and incidents, documenting findings and recommendations for remediation.
• Assist in the development and enforcement of security policies, procedures, and best practices.
• Collaborate with cross-functional teams to assess security risks associated with new projects and initiatives.
• Provide guidance and mentorship to Level 1 Security Analysts.
• Create and maintain playbooks and SOPs.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field or equivalent relevant work experience.
• 4+ years of relevant work experience.
• Strong understanding of cybersecurity principles, protocols, and technologies, both on-prem and in major cloud provider environments.
• Competency in using Endpoint Detection and Response (EDR) tools like CrowdStrike or Carbon Black.
• Deep understanding of threat hunting and alert logic.
• Proven track record of alert tuning.
• Strong forensic analysis skills, including the use of tools like EnCase or FTK.
• Proven ability to lead complex incident response efforts and coordinate with cross-functional teams.
• Experience utilizing incident response plans, including containment, eradication, and recovery strategies.
• Experience in the creation and maintenance of playbooks and SOPs.
• Possession of higher-level certifications such as CISSP, OSCP, or CISM.

Nice-to-haves

• Experience in Security engineering.
• Experience providing guidance and mentorship to Level 1 Security Analysts.