Security Operations Analyst || Akron, Ohio (Hybrid)

Summary

Security Operations AnalystAkron, Ohio (Hybrid) Phone + VideoHours will veriy during training it will 40 hours for the first 2 - 3 months 8-4 or 9-5After training they will then move to 12 hour shifts 3 twelve hour days and will then have a 6 day break.Job DescriptionThe IT Security Analyst position supports security information, incident response, forensics, threat intelligence, and event monitoring functions utilizing FirstEnergy's Security Information and Event Management (SIEM) tool, open-sourced tools, forensic tools, threat intelligence platform (TIP), Security Orchestration, Automation and Response (SOAR) platform, and big data solutions.This role focuses primarily on monitoring the events and logs from FirstEnergy's Information Technology, Cyber Security and Physical Security data feeds and building out analytics based on adversarial behaviors.If activity is picked up through monitoring processes, this role requires the technical expertise to investigate the scenario appropriately.The ability to work independently as well as within groups is essential to this role.Sensitivity to accuracy, timeliness, and professionalism in all areas of support activity is imperative.Responsibilities IncludePerform daily monitoring and investigative activities while on shift either days or nightsAssist with processing cases that require forensics to validate findings, produce threat intelligence, or fulfill an HR/Legal requestProcess different threat reports for value and potential content development, as well as keeping up with the current/relevant threat landscapeProvide continuous feedback on opportunities to enhance current processes and content, assisting to implement those changesAssist with engineering data to enhance analytical capabilities based on structure, enrichments, and linking between other data setsResearch new capabilities from both open and closed sourced technologies to find opportunities to enhance the Security Operation Center (SOC) ecosystemProvide documentation for cases and forensic reportsMaintain current knowledge of relevant technology as assignedAssist with metrics, reporting, and other SOC communicationsProcess and share information with other FirstEnergy security teamsAssist or lead projects designated by the SOC teamQualificationsAssociates Degree in Computer Science, Information Security, or similar discipline is preferred with 0 to 2 years experience. Bachelor's Degree preferredAn Associate degree in another field with 2 years relevant industry experience in cyber/information security will be considered.In lieu of a degree, 2 years of related experience is requiredRelated experience includes but is not limited to: SOC (Security Operations Center) experience, IT Security experience in detection, triage, investigation, and remediation of security incidents within a networkDemonstrate strong communication skills, both verbal and writtenDemonstrate creative problem solving and solutioningAbility to work effectively, independently and within a team environmentAbility to handle, protect and preserve highly confidential informationAbility to learn independently and from othersAbility to find answers effectively using open-sourced informationUnderstanding of programming/scripting code (Python, PowerShell, Bash), to interpret its functionalityUnderstanding of both Linux and Windows operating systemsUnderstanding of networking concepts and technologiesUnderstanding of adversarial techniques (i.e., MITRE ATT&CK framework)Basic understanding of statisticsMust be organized and comfortable with ongoing changes in prioritiesMust be able to work independently with minimal supervision#J-18808-Ljbffr

Job Description

Security Operations AnalystAkron, Ohio (Hybrid) Phone + VideoHours will veriy during training it will 40 hours for the first 2 - 3 months 8-4 or 9-5After training they will then move to 12 hour shifts 3 twelve hour days and will then have a 6 day break.Job DescriptionThe IT Security Analyst position supports security information, incident response, forensics, threat intelligence, and event monitoring functions utilizing FirstEnergy's Security Information and Event Management (SIEM) tool, open-sourced tools, forensic tools, threat intelligence platform (TIP), Security Orchestration, Automation and Response (SOAR) platform, and big data solutions.This role focuses primarily on monitoring the events and logs from FirstEnergy's Information Technology, Cyber Security and Physical Security data feeds and building out analytics based on adversarial behaviors.If activity is picked up through monitoring processes, this role requires the technical expertise to investigate the scenario appropriately.The ability to work independently as well as within groups is essential to this role.Sensitivity to accuracy, timeliness, and professionalism in all areas of support activity is imperative.Responsibilities IncludePerform daily monitoring and investigative activities while on shift either days or nightsAssist with processing cases that require forensics to validate findings, produce threat intelligence, or fulfill an HR/Legal requestProcess different threat reports for value and potential content development, as well as keeping up with the current/relevant threat landscapeProvide continuous feedback on opportunities to enhance current processes and content, assisting to implement those changesAssist with engineering data to enhance analytical capabilities based on structure, enrichments, and linking between other data setsResearch new capabilities from both open and closed sourced technologies to find opportunities to enhance the Security Operation Center (SOC) ecosystemProvide documentation for cases and forensic reportsMaintain current knowledge of relevant technology as assignedAssist with metrics, reporting, and other SOC communicationsProcess and share information with other FirstEnergy security teamsAssist or lead projects designated by the SOC teamQualificationsAssociates Degree in Computer Science, Information Security, or similar discipline is preferred with 0 to 2 years experience. Bachelor's Degree preferredAn Associate degree in another field with 2 years relevant industry experience in cyber/information security will be considered.In lieu of a degree, 2 years of related experience is requiredRelated experience includes but is not limited to: SOC (Security Operations Center) experience, IT Security experience in detection, triage, investigation, and remediation of security incidents within a networkDemonstrate strong communication skills, both verbal and writtenDemonstrate creative problem solving and solutioningAbility to work effectively, independently and within a team environmentAbility to handle, protect and preserve highly confidential informationAbility to learn independently and from othersAbility to find answers effectively using open-sourced informationUnderstanding of programming/scripting code (Python, PowerShell, Bash), to interpret its functionalityUnderstanding of both Linux and Windows operating systemsUnderstanding of networking concepts and technologiesUnderstanding of adversarial techniques (i.e., MITRE ATT&CK framework)Basic understanding of statisticsMust be organized and comfortable with ongoing changes in prioritiesMust be able to work independently with minimal supervision#J-18808-Ljbffr