Kforce

Cyber Security Analyst (1LoD)

Woburn, MA, US

Remote
Full-time
2 days ago
Save Job

Summary

Kforce has a client that is seeking a Cyber Security Analyst (1LoD) in Woburn, MA. Key Responsibilities: * Cyber Security Analyst (1LoD) will collaborate with a senior cybersecurity specialist to conduct proactive threat hunting across endpoints, networks, and cloud environments * Analyze security data from SIEM, EDR, and other telemetry sources to identify anomalies and potential threats * Analyze network traffic, endpoint telemetry, and log data to identify indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) * Develop and fine-tune detection rules, alerts, and dashboards to improve visibility and response times * Perform deep-dive investigations into suspicious activity and provide detailed analysis and reporting * Collaborate with threat intelligence teams to correlate internal findings with external threat data * Participate in the development of threat hunting playbooks and contribute to continuous improvement of detection methodologies * As a Cyber Security Analyst (1LoD), you will assist in the creation of reports and presentations to communicate findings to technical and non-technical stakeholders * Support vulnerability management efforts by identifying and tracking remediation of security gaps * Stay current with emerging threats, attack techniques, and cybersecurity trends* Bachelor's degree in Cybersecurity, Computer Science, Information Security, or related field * 3+ years of experience in threat hunting, SOC analysis, or cyber threat intelligence * Experience with SIEM platforms (e.g., CrowdStrike, Sentinel, QRadar) and EDR tools (e.g., CrowdStrike, Defender) * Experience with email protection systems (e.g., Mimecast, Defender, Purview) * Strong understanding of MITRE ATT&CK framework, kill chain models, and adversary emulation * Strong analytical skills and the ability to interpret large datasets to identify patterns and anomalies * Basic scripting knowledge (e.g., Python, PowerShell) for automation and data parsing * Excellent analytical, investigative, and communication skills Preferred Certifications: * CompTIA Security+ or CySA+ * GIAC Security Essentials (GSEC) * Certified SOC Analyst (CSA) * Microsoft SC-200 (Security Operations Analyst Associate)

How strong is your resume?

Upload your resume and get feedback from our expert to help land this job

People also searched: