Security Analyst

The Company

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand.  Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders.  We’re growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.

The Role

The Security Analyst role, as part of our Managed Security Services team, are responsible for ensuring that client environments are monitored for security incidents and escalating notable events to clients and/or internal crew members.

Opportunities are available on 1st, 2nd and 3rd shifts (Eastern Time Zone).

What you’ll do

• Live by the NuHarbor Corporate Values: Help Clients Win, Always Improve, Protect the House.
• Responsible and accountable for analyzing security alerts, events, and trends in order to effectively communicate the value of NuHarbor services.
• Independently and autonomously conducts investigations to provide actionable, context relevant, escalations to clients.
• Provide analysis and interpretation of vulnerability scans and assessments.
• Ensure client facing and internal escalations are serviced in a timely fashion.
• Leverage their understanding of client environments to identify and communicate security gaps and potential mitigations.
• Identify and scope opportunities for improvements in efficiency, quality, maturity, and capabilities.
• Maintain current certifications and training relevant to their role as defined in the NuHarbor Career Course Toolkit.
• Develop, implement, and improve documentation and operational processes.
• Use an advanced understanding of, and ability to communicate, security technologies to mitigate cyber risks.
• Be responsible for ensuring reports are generated to standard and on-schedule.
• Maintain the NuHarbor Security threat intelligence platform.
• Perform threat hunting in client environments.
• Proactively identifies and communicates internal and client risks.
• Perform intelligence gathering and analysis to influence technical control development, client security program maturity, and client attack surface defense.
• Continually researches the cyber industry to stay up to date on current threats, threat actor’s tactics and techniques, and emerging vulnerabilities.

Your foundation.  The requirements for this role:

• Bachelor’s Degree and two (2) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
  • In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• Demonstrated experience with SOC operations, executing security event triaging and tuning.
• Strong understanding of Incident Response phases and demonstrated experience responding to security incidents.
• Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset.
• Two (2) years’ experience with Splunk Enterprise Security, CrowdStrike Falcon, and Microsoft Sentinel or Defender.
• Demonstrated experience with Endpoint Detection and Response (EDR) or Security Orchestration Automation and Response solutions.
• Demonstrated experience with scripting in industry standard languages in a manner that supports automation solutions.
• Must be a citizen of the United States.

Additional capabilities that will differentiate you for this role:

• Bachelor’s Degree and Five (5) or more years in the Information Technology field.
• Holds at least two relevant industry certifications (GCFA, GCIH, CEH, CISSP, etc.)
• Demonstrated experience writing runbooks and support procedures.
• Excellent written and verbal communication, and collaboration skills.
• Experience executing initial triaging and response through a SOAR platform.
• Experience with multiple operating systems (Linux, MacOS, Windows), their command lines, processes, and file systems.
• Experience with memory and storage forensics.
• Experience with static and dynamic malware analysis.
• Experience providing recommendations to harden existing security controls.
• Experience identifying gaps within security control architecture.
• General systems administrator experience.
• Experience working in multiple cybersecurity disciplines (i.e. RedSec, Threat, Information Assurance, Engineering, etc.)

Base Salary for Security Analyst is targeted at $94,000 - $115,000 annually. Base Salary for Senior Security Analyst is targeted at $109,000 - $133,000 annually.
*Salary based on Burlington, VT salary data. Offer is based on candidate geography. Additionally, this role is eligible for the company bonus plan at a 10% target.

The Rewards

What you can expect:

• The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market.
• An organization that recognizes and rewards employee commitment and contribution to our customers’ satisfaction and success
• Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption.
• A collaborative and driven working environment in a rapidly growing company and market
• A fun and social working environment where you are encouraged to be your true self.

You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO.

We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win.  If this sounds like the kind of organization you’d like to be a part of, we‘d like to hear from you.