Kforce has a client that is seeking a Cyber Security Analyst (1LoD) in Woburn, MA.
Key Responsibilities:
* Cyber Security Analyst (1LoD) will collaborate with a senior cybersecurity specialist to conduct proactive threat hunting across endpoints, networks, and cloud environments
* Analyze security data from SIEM, EDR, and other telemetry sources to identify anomalies and potential threats
* Analyze network traffic, endpoint telemetry, and log data to identify indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)
* Develop and fine-tune detection rules, alerts, and dashboards to improve visibility and response times
* Perform deep-dive investigations into suspicious activity and provide detailed analysis and reporting
* Collaborate with threat intelligence teams to correlate internal findings with external threat data
* Participate in the development of threat hunting playbooks and contribute to continuous improvement of detection methodologies
* As a Cyber Security Analyst (1LoD), you will assist in the creation of reports and presentations to communicate findings to technical and non-technical stakeholders
* Support vulnerability management efforts by identifying and tracking remediation of security gaps
* Stay current with emerging threats, attack techniques, and cybersecurity trends* Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field
* 3+ years of experience in threat hunting, SOC analysis, or cyber threat intelligence
* Experience with SIEM platforms (e.g., CrowdStrike, Sentinel, QRadar) and EDR tools (e.g., CrowdStrike, Defender)
* Experience with email protection systems (e.g., Mimecast, Defender, Purview)
* Strong understanding of MITRE ATT&CK framework, kill chain models, and adversary emulation
* Strong analytical skills and the ability to interpret large datasets to identify patterns and anomalies
* Basic scripting knowledge (e.g., Python, PowerShell) for automation and data parsing
* Excellent analytical, investigative, and communication skills
Preferred Certifications:
* CompTIA Security+ or CySA+
* GIAC Security Essentials (GSEC)
* Certified SOC Analyst (CSA)
* Microsoft SC-200 (Security Operations Analyst Associate)