Security Operations Analyst

Baltimore, Maryland

Venable LLP

Insert Job Posting here

Education and Experience Requirements:

Bachelor's degree in Information/Cyber Security, Information Systems or Computer Science (or technical discipline), or an equivalent combination of education and experience
Preferred certifications: Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), and/or other relevant certifications.
A minimum of 3 years of experience performing security operations and performing network analysis
Experience searching and extracting log data from Splunk preferred

Knowledge Requirements:

Knowledge of computer networking concepts and protocols, and network security methodologies
Knowledge of Incident Response within Cloud Environments (e.g., Azure, AWS)
Knowledge of IT security principles
Knowledge of IT threats and vulnerabilities
Knowledge of database systems
Knowledge of Digital Forensics analysis
Knowledge of forensic artifacts typically found in Windows and Linux operating systems
Knowledge of host/network access control mechanisms (e.g., access control list)
Knowledge of known vulnerabilities from alerts, advisories, errata, and bulletins
Knowledge of incident response and handling methodologies
Knowledge of IT security principles and firm requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions via intrusion detection technologies
Knowledge of operating systems including Windows, Linux and Mac
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code)
Knowledge of basic system administration, network, cloud, and operating system hardening techniques

Skill Requirements:

Skill in using diverse logging and host analysis to correlate and make determinations about successful and unsuccessful attacks
Skill of identifying, capturing, containing, and reporting malware
Skill in collecting data from a variety of IT security resources
Skill in recognizing and categorizing types of vulnerabilities and associated attacks
Skill in using security event correlation tools

Other Requirements:

Strong focus on client service and responsiveness to external and internal involved parties
Strong focus on managing priorities, meeting deadlines, and collaborating with team members across the firm
Effective verbal and written communication skills to compose outgoing notifications, technology communications, and executive level reporting and summaries
Basic understanding of programming/scripting languages (e.g., Python, PowerShell) is a plus.
Strong analytical and problem-solving skills.
Ability to work effectively both independently and in a team environment.

Physical Requirements:

Date Posted: 01 April 2025