Cybersecurity Analyst

$91,545 - $107,700/Yr

Recology - Sacramento, CA

Full-time - Mid Level

Sacramento, CA

Waste Management and Remediation Services

About the position

The Cybersecurity Analyst position at Recology is a critical role that involves identifying and responding to potential security threats within the organization. Under general direction, the analyst will utilize advanced detection techniques and tools to proactively search for indicators of compromise (IOCs) throughout Recology's Enterprise environment. This hybrid role requires a strong understanding of security protocols and the ability to analyze security logs, network traffic, and other data sources to identify anomalies and potential security incidents. The analyst will be responsible for configuring and tuning security tools such as SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection/Prevention Systems), and endpoint detection and response (EDR) solutions. In addition to threat detection, the Cybersecurity Analyst will evaluate and recommend new security tools and technologies to enhance threat detection capabilities. Collaboration with the Incident Response team is essential to contain, eradicate, and recover from security incidents. The analyst will document findings and provide detailed reports on incidents and investigations, while also staying informed about the latest threats, vulnerabilities, and attack methods. Analyzing threat intelligence feeds and data to create detection and response processes is a key responsibility, as is sharing relevant threat information with internal teams to enhance the overall security posture. The role also involves developing and refining threat hunting methodologies and playbooks, participating in post-incident reviews to assess and enhance security processes and controls, and setting up automated vulnerability scans. The Cybersecurity Analyst will work closely with various lines of business to mitigate vulnerabilities detected and develop technical methodologies that support functional security procedures. This position requires a solid working knowledge of cybersecurity principles and the ability to handle moderately complex issues, referring more complex problems to higher-level staff as necessary.

Responsibilities

• Proactively searches for indicators of compromise (IOCs) throughout Recology's Enterprise environment.
• Utilizes advanced threat detection tools and techniques to uncover hidden threats within the network and systems.
• Analyzes security logs, network traffic, and other data sources to identify anomalies and potential security incidents.
• Configures and tunes security tools such as SIEM, IDS/IPS, and EDR solutions.
• Evaluates and recommends new security tools and technologies to improve threat detection capabilities.
• Collaborates with the Incident Response team to contain, eradicate, and recover from security incidents.
• Documents findings and provides detailed reports on incidents and investigations.
• Stays informed about the latest threats, vulnerabilities, and attack methods.
• Analyzes threat intelligence feeds and data to create detection and response processes.
• Shares relevant threat information with internal teams to enhance overall security posture.
• Develops and refines threat hunting methodologies and playbooks.
• Participates in post-incident reviews to assess and enhance security processes and controls.
• Sets up automated vulnerability scans and works with different lines of business to mitigate vulnerabilities detected.
• Develops technical methodologies that support functional security procedures.
• Performs security measures to prevent intrusion, vulnerabilities, and other threats.
• Evaluates detection and traffic log data to identify patterns and trends.
• Designs, configures, and utilizes security applications to understand and mitigate risk.
• Handles moderately complex issues and problems and refers more complex issues to higher-level staff.

Requirements

• High school diploma or GED required; Bachelor's degree in a related field preferred.
• Two to four years of related experience in cybersecurity or IT.
• CompTIA Security+ certification preferred.
• Experience with advanced threat detection and incident response.
• Familiarity with security AI and its application in enhancing security posture.
• Working knowledge of security tools such as Crowdstrike, Windows Defender, Bitsight, NMAP, and Cloudflare.
• Strong analytical and problem-solving skills.
• Ability to work collaboratively as part of a team.

Nice-to-haves

• Experience with Microsoft Office suite of applications.
• Familiarity with security tools and technologies that enhance threat detection capabilities.

Benefits

• Wellness program
• Paid holidays
• Health insurance
• Dental insurance
• Tuition reimbursement
• Paid time off
• Employee assistance program
• Vision insurance
• 401(k) matching
• Employee stock ownership plan
• Referral program