As part of the Global Business Units within the Security Operations Center, you will be part of a global Security Operations & Incident Response team identifying security events and coordinating the response for the relevant technical support groups, businesses at risk and service recovery teams. As a member of this fast-paced team, you will execute controls to protect the infrastructure and employees against internal and external malicious attacks and infiltration.

The security analyst is responsible to monitor and help maintain the security posture of the Global Business Units IT environments.  These responsibilities include analyzing data to identify computer attacks and malware infections, responding to security incidents, documentation, analytical investigation and recommended proactive security threat countermeasures.  Using cutting edge network behavior and anomaly detection tools, the analyst will examine, identify, and understand the nature of cyber-threats such as viruses, worms, bots, root kits and Trojan horses. In addition, it may be necessary to work directly with employees to collect, analyze and submit virus samples to our vendors, help remediate malware infections and prevent further damage.  The analyst will be expected to participate in security project tasks on an as needed basis and interact directly with Security organizations and multiple Lines of Businesses globally.

Responsibilities\:

Recognize potential; successful; and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information

Perform analysis on logs, traffic flows, and other activities to identify malicious activity

Enhance existing incident response methods, tools and processes which provide the organization value by reducing risk

Qualifications\:

• 5 years IT security experience which includes networking, endpoint, and system level security suites. 

• Proficient in Python and SQL, knowledge of Django and Flask is a plus

• Proficient in Cloud Native environments with a strong understanding of container technologies and workflows, with the ability to create and manage containers

• Ability to create and modify detection signatures in multiple query languages and platforms

• Understanding of malware infection vectors, identification, and remediation techniques

• Malware identification, analysis, reverse engineering, and disk forensics skills. 

• Experience in security aspects of multiple platforms, operating systems, software, communications and network protocols or an equivalent combination of education and work experience. 

• Understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network infrastructure. 

• Security processes and technologies including threat analysis, security monitoring and security technologies like IDS/IPS, DDoS prevention technologies.