Cyber Operations Analyst
Remote (United States)
Please review the job details below.
Maxar Intelligence is a provider of secure, precise, geospatial intelligence. We deliver disruptive value to government and commercial customers to help them monitor, understand and navigate our changing planet. Our unique approach combines decades of deep mission understanding and a proven commercial and defense foundation to deploy solutions and deliver insights with unrivaled speed, scale and cost effectiveness.
The Maxar Cybersecurity team is seeking an experienced Cybersecurity Operations Analyst who will provide ongoing support for the Cybersecurity Operations Center (CSOC) in the areas of incident response and investigation. This person will be responsible for providing initial, front-line, analysis and resolution of security alerts as generated by the SIEM and other monitoring solutions capable of generating alerts. This position can be 100% remote.
Life with Us:
There is a reason we boast awards like Best Employer, Best Place to work, Top employer, candidate experience winner. Our strength is in our people. Each team member makes a unique contribution
to our collective mission. So, we recognize that with best-in-class benefits like:
• 401K matching and immediate vesting schedule
• Career growth opportunities
• Family friendly benefits like maternity and paternity leave, adoption reimbursement, flexible hours, hybrid work options
• Programs to help you grow like tuition reimbursement, hackathons, and career development
• Student loan repayment
• Generous time off
• Comprehensive medical, dental and vision at affordable monthly rates
Primary Duties and Responsibilities:
- Monitor security tools and provide appropriate remediation response when necessary.
- Escalate security events as needed and/or driven by process.
- Perform and/or coordinate information gathering and analysis that will be provided to Maxar IT teams responsible for clearing actions.
- Interact with MDR analysts to conduct triage and analysis of real-time data feeds and alerts to detect potential intrusions.
- Work with Cybersecurity Engineering resources to correct issues with log source generation, security tool issues, and building out of automation run books.
- Implement changes to the technologies required, including inclusion of log sources/types and changes to alerts.
- Collaborate and support the vulnerability management team in identification and awareness of zero-day vulnerabilities.
- Participate in Incident Response activities.
Minimum Qualifications:
- Must be a U.S. Citizen
- 2+ years' experience working in a Security Operations Center environment.
- Bachelors of Science, with a focus on Information Security.
- Professional certifications: CySA+, CISSP or equivalent cybersecurity certification.
- Ability and willingness to share on-call responsibilities, work non-standard hours, and aid cybersecurity investigations.
- Experience with …
This job isn't fresh anymore!
Search Fresh JobsJob Profile
Must be a U.S. Citizen
Benefits/Perks401(k) matching Career development Career growth opportunities Generous time off Hackathons Student Loan Repayment Tuition reimbursement
SkillsCybersecurity Cybersecurity technologies EDR Incident Response Information security Security Tools SIEM SOAR Vulnerability Management
Certifications TimezonesAmerica/Anchorage America/Chicago America/Denver America/Los_Angeles America/New_York Pacific/Honolulu UTC-10 UTC-5 UTC-6 UTC-7 UTC-8 UTC-9