Information Security Analyst - Cybersecurity Operations

Full-time - Mid Level

Alameda, CA

Professional, Scientific, and Technical Services

About the position

Join our highly skilled and rapidly growing cybersecurity team as a Cybersecurity Operations Analyst. The ideal candidate will be responsible for monitoring, detecting, and responding to cybersecurity events, ensuring the overall security of our organization's information systems. This role requires a proactive approach to identifying and mitigating potential threats, as well as a strong ability to collaborate with various departments, including the IT Helpdesk. As a Cybersecurity Operations Analyst, you will monitor network traffic and system logs for security incidents and anomalies, investigate and respond to security events in real-time, and implement and manage security tools such as SIEM, XDR/EDR, and Email Security. You will also conduct threat analysis and risk assessments to identify vulnerabilities, develop and maintain incident response plans, and collaborate with IT and other departments to ensure security best practices are followed. This position is ideal for someone who is detail-oriented, analytical, and passionate about cybersecurity. If you thrive in a fast-paced environment and are eager to make a significant impact on our organization's security, we encourage you to apply.

Responsibilities

• Oversee the end-to-end cybersecurity threat response, from initial detection and analysis to containment, eradication, and recovery.
• Monitor and analyze security events from various sources, including SIEM systems, intrusion detection/prevention systems, XDR, email security and firewall logs.
• Investigate and respond to security incidents, including malware infections, phishing emails, unauthorized access, and data breaches.
• Collaborate with the IT Helpdesk to address security-related issues and provide guidance on secure configurations and practices.
• Provide expertise and support to the IT Helpdesk in identifying and mitigating security threats.
• Facilitate communication and coordination between the cybersecurity team and the IT Helpdesk to enhance overall security operations.
• Stay up to date with the latest cybersecurity threats, trends, and technologies to continuously improve the organization's security posture.
• Regularly review and fine-tune the configurations of current security tools such as SIEM, EDR/XDR, and IDS/IPS.
• Co-create and maintain playbooks to standardize and automate threat response procedures.
• Stay current with the latest threat landscape and emerging trends in cybersecurity.
• Contribute to the overall information security strategy.
• Assist in the development and delivery of training and awareness programs aimed at educating employees on cybersecurity best practices.

Requirements

• Bachelor's degree in related discipline and 5+ years of related experience; or equivalent combination of education and experience.
• CISSP, CISM, CEH, OSCP, GIAC or similar cybersecurity certification.
• Experience in a SOC environment, with background in threat detection, incident response, and threat hunting.
• Experience with threat intelligence platforms and integrating threat intelligence feeds to security tools.
• Experience in proactive threat hunting to identify and neutralize emerging threats.
• Experience with conducting and analyzing phishing simulations.
• Experience or working knowledge of cloud, network, and application security.

Nice-to-haves

• Experience in Biotech/Pharma is a plus.
• Familiarity with SOC tools and technologies such as SIEM (e.g., Splunk, QRadar), EDR (e.g., CrowdStrike, Cortex), and IDS/IPS (e.g., Snort, Suricata).
• Basic scripting skills (e.g., Python, PowerShell).
• Basic understanding of machine learning and behavioral analytics.
• Ability to develop and refine basic correlation rules within SIEM.

Benefits

• 401k plan with generous company contributions.
• Group medical, dental and vision coverage.
• Life and disability insurance.
• Flexible spending accounts.
• Discretionary annual bonus program.
• Opportunity to purchase company stock.
• Long-term incentives.
• 15 accrued vacation days in the first year.
• 17 paid holidays including a company-wide winter shutdown in December.
• Up to 10 sick days throughout the calendar year.