Incident Response Analyst - Weekend Shift

March 15

Apply Now

Receive Emails with Similar Jobs

Thrive

WebsiteLinkedInAll Job Openings

Thrive is a company that specializes in providing managed services and technological solutions for businesses. They focus on cybersecurity, cloud services, network management, and productivity tools to optimize business performance and drive digital transformation. With a customer-centric approach, Thrive offers services such as disaster recovery, IT compliance, regulatory services, and virtual chief information security officer (vCISO) advisory. They serve various industries including financial services, healthcare, government, and education, leveraging their expertise to empower clients to harness the promise of technology for better strategic outcomes.

Managed IT Services • Complete Outsourced IT Services • Hosted Cloud Services • Help Desk Support • Onsite Engineering

201 - 500 employees

🔒 Cybersecurity

🏢 Enterprise

📋 Description

• Will work Friday/Saturday/Sunday/Monday from 8 AM to 6 PM EST • Work can be remote - must be located in the US • With a growing client base, Thrive is continuing to build out its security team. • We are looking to hire an Incident Response Analyst to take a role within our Security Operation Center. • The analyst will assist with continuously monitoring and improving our customers' security posture, while preventing, detecting, analyzing, and responding to cybersecurity incidents utilizing technology and well-defined processes and procedures. • The ideal candidate will have a passion for information security and will value what a properly managed Security monitoring solution can bring to our client needs. • Process investigation requests from SOC Analysts who perform security event monitoring using Security Information and Event Management (SIEM) from multiple sources, including but not limited to, events from network and host-based intrusion detection/prevention systems, network infrastructure logs, systems logs, applications, and databases. • Investigate intrusion attempts, differentiate false positives from true intrusion attempts, and perform in-depth analysis of exploits. • Lead incident response and threat hunting efforts for confirmed High Priority security incidents and follow through until resolution. • Utilize threat intelligence to identify and investigate potential security threats. • Develop playbooks for incident response and incident management processes, including threat triage, incident investigation, and incident resolution. • Conduct regular reviews of playbooks to ensure they are current and effective. • Work with cross-functional teams to ensure that playbooks are aligned with the overall security strategy and goals. • Participate in tabletop exercises and drills to test and validate playbooks. • Monitor and evaluate security incidents to identify opportunities for improving playbooks. • Keep up-to-date with current security threats and trends to ensure that playbooks are relevant and effective. • Actively investigate the latest security vulnerabilities, advisories, incidents, and TTPs (tactics, techniques, and procedures) and work with the Security Engineering team to recommend use cases. • Proactive monitoring, threat hunting, and response of known and/or emerging threats. • Carry out Thrive’s information security strategy both internally and externally for 400+ clients. • Analyze data from our SOC, SIEM and EDR platforms and determine if further analysis is needed. • Work within Thrive’s security standards and best practices and recommend future enhancements. • Stay abreast of security events and techniques to keep our clients protected.

🎯 Requirements

• Demonstrates comprehension of best security practices • Has advanced knowledge of the following systems and technologies: SIEM (Security Information and Event Management) • TCP/IP, computer networking, routing, and switching • IDS/IPS, penetration and vulnerability testing • Firewall and intrusion detection/prevention protocols • Windows, UNIX, and Linux operating systems • Network protocols and packet analysis tools • EDR, Anti-virus, and anti-malware • Content filtering • Email and web gateway. • Malware, Network, or System Analysis • Professional experience in a system administration role supporting multiple platforms and applications • Ability to collaborate and communicate security issues to clients, peers and management. • Strong analytical and problem-solving skills • Adaptability and resilience in rapidly evolving situations • Ability to be a part of an on-call rotation, occasionally working nights and weekends to support High Priority Security Incidents