FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity operations, including advanced security event analysis, incident response, and threat hunting. Proficient in utilizing SIEM and EDR technologies to monitor and investigate security alerts while effectively communicating findings and collaborating with cross-functional teams.
Highest-signal resume keywords
SIEM TechnologiesEDR TechnologiesSecurity+ CertificationCySA+ CertificationIncident Response
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security Alert InvestigationEndpoint AnalysisThreat Intelligence EvaluationNetwork Security FundamentalsIncident TriageVulnerability AssessmentMITRE ATT&CK FrameworkScripting and AutomationThreat HuntingDetection Tuning
Soft Skills
Strong Written CommunicationVerbal CommunicationKnowledge SharingTechnical Guidance
Tools & Technologies
Splunk Enterprise SecurityWindowsLinuxCloud Environments
Certifications & Qualifications
Security+CySA+
Industry Keywords
Cybersecurity OperationsIncident Response LifecycleAnomalous ActivitySecurity EventsRisk Assessment
Tech Stack
Tools & technologiesCloudCyber SecurityLinuxPythonSplunk
About the role
Key responsibilities & impact- Perform advanced security event analysis as part of the 24/7/365 Enterprise Security Operations Center Detection & Response team
- Monitor, triage, and investigate security alerts and anomalous activity
- Determine severity, scope, potential impact, and appropriate response actions
- Analyze and correlate network, endpoint, system, and cloud telemetry using SIEM and EDR technologies
- Evaluate suspicious activity, threat intelligence, and vulnerability information to identify potential threats and assess organizational risk
- Execute approved response actions, including IP, URL, and hash blocks and endpoint isolation
- Escalate confirmed or suspected incidents to appropriate incident response teams
- Participate in proactive threat hunting to identify suspicious behavior, indicators of compromise, and detection gaps
- Document investigations, findings, evidence, and response actions in the incident tracking system
- Recommend detection tuning, process enhancements, and procedure and documentation updates
- Support onboarding and training of new analysts through knowledge sharing, cross-training, and technical assistance
- Collaborate with cybersecurity teams including GRC, architecture, and detection engineering
Requirements
What you’ll need- Bachelor’s degree and 2+ years of experience, or an Associate’s degree in a related discipline and 3+ years of experience
- An additional 4+ years of experience may be considered in lieu of a degree
- Must be a US Citizen
- Minimum 2 years of cybersecurity operations related experience
- Security+ and CySA+ certifications required
- Hands-on experience with SIEM and EDR technologies, including security alert investigation, endpoint analysis, and correlation of security events
- Experience triaging security incidents, assessing severity and potential impact, and determining escalation procedures
- Working knowledge of network security fundamentals and identification of suspicious network activity
- Working knowledge of Windows, Linux, and cloud environments, including relevant security logs, events, and telemetry
- Understanding of attacker tactics, techniques, and procedures, including the MITRE ATT&CK framework
- Ability to independently investigate complex or unfamiliar security events and exercise sound technical judgment
- Strong written and verbal communication skills, including clear documentation and coordination with technical and nontechnical stakeholders
- Ability to share technical knowledge and guide less experienced analysts
- Preferred: hands-on experience with Splunk Enterprise Security
- Preferred: experience with full incident response lifecycles, including containment, eradication, recovery, and post-incident analysis
- Preferred: proactive threat hunting and detection tuning experience
- Preferred: familiarity with Python, PowerShell, or similar scripting and automation technologies
Benefits
Comp & perks- Remote work anywhere in the United States
- 2nd shift or 3rd shift schedule option
- Equal Opportunity Employer