Security Operations Analyst

 

Job summary

The Trust Operations Analyst will help advance the security operations of DigiCert by identifying potential risks, and threats by performing real-time log analysis. The Trust Operations Analyst will make use of analyses and understanding of exploits and vulnerabilities to maintain and improve DigiCert’s security posture and hygiene. This position will work on security incidents as they arise with the team.

 

What you will do

• Provide analysis of security threats and problems.
• Management and evaluation of security alerts and detections
• Work through tickets and resolve tickets per defined SLAs
• Participate in Security Incident Response and analysis of incidents
• Assist in the configuration, management, and maintenance of various security related software and systems
• Be able to effectively work within a team, and self-sufficient/self-motivated when assigned solo work
• Willingness to stay current on emerging threats, vulnerabilities, audit framework updates, etc to help protect DigiCert’s systems
• Willingness to evaluate new tools to improve efficiencies in operational processes
• Actively participate in ongoing training and knowledge transfer with team members
• Provide metrics and statistics to management
• Critically assess current practices and provide feedback to management on improvement opportunities
• Understand policies and standards and be capable of conveying those requirements to end users
• Set clear expectations and provide timely follow-up as appropriate
• Provide audit support for Compliance
• Other duties and responsibilities as assigned
• Willing to work incident response as necessary and work with other groups when this occurs

 

What you will have

• 3+ years of experience in Information Technology or related technical discipline
• Good experience in Network Traffic
• Advanced level of knowledge of Information Security design concepts and principles
• Must have strong written and verbal communication skills
• Customer Service background and good interpersonal and organizational skills
• Ability to perform in depth log analysis
• Ability to work incidents, experience responding to security incidents in the past
• Ability to look at logs and understand the systems that could be affected
• Willingness and ability to obtain CISSP certification if not already completed

 

Preferred Qualifications

• Master’s degree in a technical discipline
• 2+ years of experience in Information Security
• 2+ years of experience with SIEM technologies (preferably Splunk)
• Experience with cloud-based identity providers, SSO, SAML, etc
• Experience with zScaler products
• Experience with Web Application Firewall and DDoS protection
• Experience with web application security technologies
• Experience with vulnerability management software (preferably Tenable)
• Experience with endpoint detection and response software (CrowdStrike preferred)
• Experience with scripting languages (Python, Go, PHP, Powershell, Bash, etc)
• Experience with Help Desk
• Knowledge of penetration testing practices and principles
• Certified Information Security Professional (CISSP)

 

Benefits

• Provident Fund
• Medical Aid + Gap Cover
• Employee Assistance Program
• Gym Reimbursement
• Life Insurance
• Disability Insurance

#LI-KK1

 

__PRESENT

__PRESENT

__PRESENT

__PRESENT