Sr. Security Operations Analyst

*Must work a hybrid schedule (3 days onsite) out of our Atlanta office.*OverviewThe Senior Cybersecurity Analyst – CSOC is a Senior level non-management role that reports directly to the CSOC Manager. They will be responsible for guiding a hybrid team of security analysts tasked to detect, Triage, analyze, respond, and report cybersecurity incidents in addition to performing advanced analysis and assisting with incident response. A successful candidate will be able to use experience, knowledge, and critical thinking to perform CSOC duties that deviate from daily norms with minimal guidance and mentor more junior analysts on the solution. As a Senior Analyst, this individual must be highly organized, detail oriented, and able to manage multiple investigations, projects, and deliverables at once.Role & ResponsibilitiesSecurity OperationsIn-depth security event analysisFacilitate and oversee the execution of day-to-day directions given by CSOC ManagerEnhancing detection and alert maturityEnhancing technical and administrative processes and procedures.Providing blue team subject matter expertise to advise CSOC Leadership and mentor Analysts.Document and communicate findings and after-action reports to the entire security team.Review investigations and perform QA/QC.Drive alert logic refinement through tuning and whitelistingTrain and Mentor Associate and Mid-level AnalystsPreforming Tier 3 On Call rotations to include Weekends or NightsSupport IR InvestigationsIncident coordination by assignment of Work Streams and creation of reportsServe as the technical escalation point for the CSOC team.Provide ad-hoc training to team membersProject WorkPerform CSOC maturity projects under the guidance of Cyber Operations LeadershipPartner with Security Engineering teams to enhance features and capabilities within current security tooling.Create and update written policies and procedures.Qualifications & Experiences5 -7 years of relevant experience or equivalent demonstratable knowledge & skill set.Ability to think critically to solve problems with minimal guidance.Ability to perform comprehensive Incident, root cause analysis and write technical reports.The ability to conduct investigations on multiple operating systems such as Linux, iOS, and Windows.Experience performing manual log analysis from a variety of host-based and network-based sources.The ability to conduct security investigations without the assistance of pre-extracted data or pre-established queries across multiple platforms such as Splunk, OS CLI/Terminal, Sentinel One, etc.Experience using modern CSOC/Fusion Center enterprise security suite.Familiarity with Digital Forensics and Incident Response (DFIR) concepts.Experience participating in CIRT/CSIRT investigations.Knowledge of exploits, vulnerabilities, malware families and common attack vectors.Scripting (Python, PowerShell, bash), regex experience is a plus.Experience with firewalls, intrusion detection/prevention systems.Effective in collaborating with teams in remote offices and multiple cultures across the globe.Intermediate or higher Security Certifications are a plus - CYSA+, CISSP, CFR, CHFI, GCIH, GCFA, or GNFA, PenTest+, OSCP, etc.Ability to tailor complicated Security and Technical information to the comprehension levels of intended audiences, whether that be non-technical Senior Executives or highly technical Subject Matter Experts.Championing Inclusion at WBDWarner Bros. Discovery embraces the opportunity to build a workforce that reflects a wide array of perspectives, backgrounds and experiences. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.If you're a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.#J-18808-Ljbffr

Government Careers

Show more