Security Operations Analyst L1

Velocity Search Group - New York, NY

Full-time - Entry Level

New York, NY

Administrative and Support Services

About the position

The Security Operations Analyst L1 position at a major entertainment/media firm in Midtown Manhattan is a contract role focused on enhancing the organization's cybersecurity posture. The analyst will monitor and respond to security incidents, collaborate with cross-functional teams, and assist in executing various security initiatives. This hybrid role requires four days onsite and involves continuous improvement of security measures to protect the organization from cyber threats.

Responsibilities

• Monitor and respond to security incidents and alerts
• Regularly audit and analyze user activity logs, privileged activities, file access, and email activity
• Recognize and respond to anomalous patterns of user and entity behavior
• Analyze anomalous traffic in cloud environments, validate threats, and determine remediation steps
• Analyze email attributes such as headers and implement appropriate countermeasures
• Analyze and assess security threats and vulnerabilities, recommending appropriate mitigating actions
• Continuously monitor networks for security breaches and other anomalous activities
• Maintain detailed records of security incidents, analyses, and mitigation actions taken
• Generate and present detailed reports on security incidents, trends, and responses for senior management
• Participate in process review, incident briefing, and incident response meetings
• Work closely with other GT&O staff to enhance system security and develop robust defense mechanisms
• Stay informed and updated with the latest security technologies, trends, and threat vectors to continuously improve the organization's security posture
• Knowledge of common tactics, techniques, and procedures (TTPs) used by cyber adversaries

Requirements

• Bachelor's Degree required, with a preference for Cybersecurity
• 1+ years of experience in an IT Security Operations role
• 1+ year of experience with the Microsoft Defender Security Suite, including Microsoft Defender for Identity, Microsoft Defender for Office, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud
• Strong understanding of network protocols, firewalls, VPNs, IDS/IPS, and anti-virus software
• Strong understanding of identity management and Active Directory and Azure Active Directory
• Excellent analytical and problem-solving skills with the ability to think critically under pressure
• At least one entry-level cybersecurity certification: CompTIA CySA+ or Security+, GIAC Security Essentials (GSEC), Microsoft Certified Security Operations Analyst
• Knowledge of the MITRE ATT&CK framework, and basic concepts of threat hunting
• Proficiency with scripting languages
• Experience with offensive security tools
• Strong verbal, written, and interpersonal communication skills
• Highly organized, motivated, dedicated and a team player
• Availability to work during emergencies, and scheduled afterhours and weekends