Cyber Security Analyst

First Quality is a family-owned manufacturer of personal care and household products seeking a Cyber Security Analyst to join its Information Security SOC operations team. The role focuses on tier 2 incident detection, investigation, response, detection-rule tuning, threat hunting, threat intelligence, automation development, reporting, and penetration-testing exercises.

Responsibilities:

• Incident Detection and Response - Monitor and analyze alerts generated by SIEM/SOAR platforms and user reports, investigate security incidents, and execute containment and eradication procedures to minimize impact and restore normal operations
• Tuning & Optimization – Continuously refine detection rules and SOC processes to reduce false positives, enhance detection accuracy, and improve overall operational efficiency
• Research & Development – Explore emerging threats and attack techniques to develop and implement new detection rules to expand visibility and strengthen the organization’s security posture
• Threat Hunting – Proactively hunt for hidden threats by analyzing logs and identifying gaps missed by existing security tools and improve security posture
• Threat Intelligence - Review threat intelligence feeds, channels and articles to identify potential risks and proactively strengthen defenses
• Automation Development - Design, implement, and maintain automation solutions to streamline SOC workflows, reduce manual effort, and accelerate incident response times
• Reporting – Prepare and present comprehensive reports on key SOC activities, metrics, and security trends to stakeholders and management
• Penetration Testing Exercises - Participate in Red and Purple Team exercises to assess and improve the effectiveness of security controls and incident response capabilities

Requirements:

• • Hands-on experience working with SIEM platforms
• • Familiarity with EDR solutions like CrowdStrike, SentinelOne, Microsoft Defender for Endpoint, Cortex XDR
• • Understanding and familiarity with interpreting common log sources for monitoring and investigation (e.g. Firewall, Azure AD, Windows Security Log, Email, Proxy\URL Filtering etc.)
• • Solid grasp of prevalent attack types, including phishing, brute-force attacks, malware, and data exfiltration techniques
• • Demonstrated proactive mindset, strong sense of responsibility, and urgency in addressing security incidents and tasks
• • Strong motivation and willingness to continually learn and grow, adapting to new tools and evolving threat landscapes
• • Minimum of 1-2 years of experience working in a Security Operations Center (SOC) environment, either in-house or with a Managed Security Service Provider (MSSP)
• Additional relevant experience may be considered in lieu of a degree
• • Analytical and problem-solving skills
• • Strong troubleshooting and log analysis capabilities
• • Ability to translate security requirements into technical solutions
• • Ability to work both independently and collaboratively in a fast-paced SOC environment
• • Excellent verbal and written communication skills, with the ability to collaborate effectively with team members both within and outside the SOC
• • High level of situational awareness and problem sensitivity, with the ability to proactively identify issues and escalate concerns as appropriate
• • Ability to work independently, manage multiple priorities, and succeed in a fast-paced, dynamic environment
• •Travel up to 5 days per year•
• • Bachelor's degree in Computer Security, Cybersecurity, Information Security, or a related field preferred
• • Preferred: Experience with advanced SIEM content development, including custom correlation rules, dashboards, and reporting
• • Preferred: Proficiency in scripting languages such as Python, PowerShell, or Bash for automating security tasks and processes
• • Preferred: Direct involvement in end-to-end incident response, including root cause determination and post-incident reporting
• • Preferred: Experience monitoring and securing cloud environments (e.g., Microsoft Azure, AWS, Google Cloud Platform)