Cyber Threat Analyst, IT - Security

Ascensus is a company focused on shaping and maintaining a Cyber Threat Intelligence program. The Cyber Threat Analyst will monitor cybersecurity solutions, develop and maintain cybersecurity SOPs, and assist in incident response and penetration testing.

Responsibilities:

• Monitoring of all cybersecurity solutions including but not limited SIEM, EDR, Vulnerability Management, Network, FW / IPS, DLP, cloud for suspicious activities
• Develop and maintain 24/7 SOC Tier 1 and Tier 2 cybersecurity SOP and playbooks
• Monitor threat detection and response tools including but not limited to malware analysis, email analysis, application analysis (SAST/DAST monitoring), network analysis, domain intelligence, threat IOC and feeds, forensic analysis, and sandbox tools
• Establish and embed key threat intelligence KPIs and reporting capabilities
• Follow digital forensic program and process as directed
• Execute IT incident response plan as directed
• Assist in the performance of penetration testing and yearly managed service assessment

Requirements:

• Minimum 2 years of experience in Information Security
• Good understanding of the cyber threat landscape
• Demonstrable knowledge of all the following areas: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, email security, endpoint security, network security, Windows/Linux/macOS systems, cyber threat hunting, malware analysis tools and techniques, cyber threat intelligence, common threat actor TTPs, application security concepts, cloud security fundamentals, Incident Response methodologies
• Be highly inquisitive and never stop asking questions or looking for results
• Knowledge of relevant frameworks, standards, and best practices such as NIST CSF, PCI-DSS, CIS CSCs, MITRE ATT&CK, Cyber Kill Chain etc
• Excellent written and oral communication skills
• The ability to communicate effectively (clear, concise, and professionally) with all levels within Ascensus, auditors and business partners
• For virtual remote positions, we require an uninterrupted workspace during business hours and an internet work speed of 25 Mbps or better