Sr Security Analyst

ECS is seeking a Sr. Security Analyst to work in our Huntsville, AL office.

Please Note: This position is contingent upon contract award.

As a leading managed cybersecurity services provider, ECS delivers a highly tailored and customized offering to each customer. The Professional Services Team is responsible for working with our customers to understand their needs and delivering a complete solution. We will leverage your unique skills to help solve customers' challenges, such as engineering a system to address a technical hurdle, protecting customer data, or consulting on a wide range security topics. You are empowered to engage and lead across multiple groups and must have the self-sufficiency and focus to work well without constant oversight.

This role requires a blend of technical proficiency with Elastic SIEM, cybersecurity principles, and strong analytical capabilities to effectively protect against and respond to cyber threats. The candidate should also possess excellent interpersonal skills to communicate complex security issues to a broad audience effectively.

Responsibilities:

• Network Monitoring and Intrusion Detection: Perform analysis using various defense tools, including IDS/IPS, firewalls, and host-based security systems.

• SIEM Management: Utilize Elastic SIEM to correlate events and identify indicators of threats, creating actionable intelligence.

• Threat Research: Investigate emerging threats and vulnerabilities to enhance incident identification processes.

• Threat Detection: Implement both log-based and endpoint-based detection strategies to identify and mitigate threats from multiple sources.

• Content Development: Develop and customize SIEM content such as machine learning rules, signatures, and dashboards according to customer requirements.

• Activity Correlation: Correlate data across network, cloud, and endpoints to identify attacks and unauthorized actions.

• Alert Management: Review and respond to alerts from SIEM and other sensors; document incidents in formal, technical reports.

• Phishing Analysis: Analyze phishing email submissions to determine threat levels and appropriate responses.

• Incident Response Support: Provide effective incident response and mitigation strategies to contain and rectify breaches.

• Threat Intelligence Integration: Collaborate with threat intelligence and threat-hunting teams to maintain up-to-date knowledge of threat landscapes.

• Tool Evaluation: Assist in assessing new security tools and analytical techniques for integration into managed security services.

• Breach Investigation: Support both large-scale and smaller-scale cyber breach investigations.

• Stakeholder Communication: Effectively communicate cyber events and findings to both internal and external stakeholders.

• Outstanding verbal and written communication abilities.

• Able and willing to support domestic or international on-site travel with customers or at ECS offices. Any travel will be short in duration and well-planned.

• Possess and maintain a U.S. Passport.

• Able and willing to obtain a US Security Clearance