Cache Creek Casino Resort - Brooks, CA
posted 2 days ago
About the position
The Information Security, Sr Analyst SecOps is responsible for maintaining confidentiality, integrity, and availability for all cyber security systems. This person will operate and maintain security software including but not limited to email security, endpoint detection and response (EDR), vulnerability management, security incident and event management (SIEM) and network detection and response (NDR). Analysts will maintain a daily checklist and create security incidents as appropriate for any findings. Analysts will also support the governance, risk, and compliance functions by monitoring security stack agents' saturation. Finally, all actions performed by analysts will be recorded into the security incident software to ensure service level agreements are being met.
Responsibilities
- Work with other IT Teams for vulnerability remediation and validation.
- Execute risk/threat-hunting activities.
- Perform security incident response activities.
- Evaluate, setup and configure security products.
- Administrate security products as part of day-to-day operations.
- Resolve security products issues that impact business operations.
- Review audit, security, and system logs and correlation with SIEM.
- Work on blue, purple, and red team exercises.
- Participate in change control meetings for evaluation of risk.
- Develop, document, and improve processes for security operations.
- Evaluate and identify security risks and report findings to management.
- Evaluate IOCs and TTPs from classified sources and extrapolate them for consumption into cyber defense tools.
- Contribute to assisting, training, and supporting other team members.
- Ensure all information security systems are operational and within SLAs.
- Track all security incidents and ensure items are being resolved within SLAs.
- Create reports and develop metrics and KPIs for cyber security tools.
- Staying up to date on trends and new tools in the security industry.
Requirements
- Bachelor's degree in information security, Information technology, Computer Science or other related technology degree.
- Industry certifications like (ISC)2 CISSP, ISACA CISM, CompTIA Security+, CompTIA Network can also satisfy the education requirement.
- Experience with cyber security products (CrowdStrike, SentinelOne, ZScaler, Netskope, Splunk, Abnormal, Proofpoint, Fidelis, ExtraHop).
- Strong knowledge administering multiple operating systems (Windows, Linux, macOS) and common ports and protocols.
- Working knowledge data loss prevention techniques and certificate management.
- Ability to analyze firewall rule changes for insecure configurations.
- Excellent understanding of security concepts including but not limited to: encryption, public key infrastructure, cloud architecture.
- Strong analytical and problem-solving skills.
- Excellent verbal and written communication skills.
Benefits
- Great Pay
- Opportunities to Grow
- Gas Discounts
- Dental Insurance
- Life Insurance
- Paid Time Off (PTO)
- Recognition Program
- Free meals in our Employee Dining Room
- Weekly Paychecks
- Affordable Healthcare
- Medical Insurance
- Vision Care Insurance
- 401k Savings Plan
- Tuition Reimbursement
- Employee Discounts
- Direct Deposit
