Phoenix Staff Inc Hiring for Security Analyst – Tier 2 Job at Phoenix, AZ Full Time

Title: Security Analyst – Tier 2

Location: Phoenix, AZ (Hybrid; Must be onsite 5 days a week for the first 3 – 4 months. After training, must be onsite 3 days a week)

As a Security Analyst, you will be expected to handle customer-facing investigations, mentor and train fellow coworkers, and participate in interaction with customers and other teams through email or phone.

Your role:

• Triage alerts and adjudicate if further investigation or action is required by the customer
• Assist customers with the investigation and response of incidents throughout the incident response process
• Perform investigations of customer requests and be able to provide further contextual information along with recommended actions
• Handle escalated customer-facing issues and be the designated incident lead for major incidents
• Proactively threat hunt using data within customer environments
• Analyze logs, perform incident response, and identify potential compromises to customer networks
• Mentor junior coworkers

What you’ve got:

• Must have more than 2 years of experience performing triage/incident response in enterprise environments
• 2+ years of experience performing forensic analysis of logs to identify malicious artifacts
• Experience using ticketing systems for tracking is required (ServiceNow, JIRA, etc.)
• Experience analyzing log data in a SIEM (LogRhythm, Azure Sentinel, Splunk, etc.)
• Strong understanding of incident response methodologies and reporting
• A solid understanding of the TCP/IP protocol suite, security architecture, and common TTP’s (tactics, techniques, and procedures) used by threat actors
• Strong understanding of common web attacks, NIST, or SANS Incident Handling Procedures.
• Knowledge of Windows and Linux operating systems and networking principles
• Strong verbal/written communication and interpersonal skills are required to document and communicate findings, escalate critical incidents, and interact with customers
• Higher-level security certifications are ideal (CEH, GCIH, GCFA, GCFE, GCTI, GCIA, GREM, GPEN, GFNA, OCSP)
• Strong research background and a strategic approach, especially with respect to event classification, event correlation, and root cause analysis
• Experience mentoring other analysts and orchestrating team efforts for problem-solving
• Ability to manage projects to completion both personally and in a group