Payrate: $38.00 - $40.00/hr.

Summary:
Seeking a Tier 2 "Senior" Cyber Security Analyst to join our County of Orange Security Operations Center (SOC) team. The core mission of the SOC is to protect County assets, systems, and data against cyber threats. The Tier 2 Security Analyst will create, tune, monitor, and investigate Security Information and Event Management (SIEM) alerts and assist with other SOC functions such as incident response, digital forensics, data loss prevention, and eDiscovery actions.

Responsibilities:

Proactively monitor security events for networks and systems.
Mentor and guide T1 SOC Analysts.
Identify, investigate, and report on potential Security Incidents.
Support risk and vulnerability assessment at the network, system, and application level.
Support cyber metrics development, maintenance, and reporting.
Support cyber threat intelligence development and reporting.
Support routine identification, development and implementation of automation tasks.
Proactively develop, recommend, and implement security controls and formulate operational risk mitigations along with assisting in security awareness programs.
Research, evaluate, and recommends new security tools, techniques, and technologies and introduces them to the enterprise in alignment with IT security strategy.
Utilizes COTS/GOTS and custom tools and processes/procedures to scan, identify, contain, mitigate and remediate vulnerabilities, and intrusions.
Assists in the implementation of the required government policy (i.e., NIST) and makes recommendations on process tailoring.
Performs analyses to validate established security requirements and to recommend additional security requirements and safeguards.
Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.
Routinely provide briefings to senior staff.

Required Education and Experience:

A Bachelor’s degree in related field and 2 years of related experience required; 4 years of related experience is highly preferred. Additional experience can be substituted in lieu of education.
Preferred Certifications: CySA+, SecurityX+, GIAC Security Essentials (GSEC), or similar industry related certification(s).
Must be able to pass the LiveScan background check, CSS Department review, and Probation Department review.
Must be able to pass a Drug Screen.

Required Skills:

Professional experience with:

Programming languages such as Python, C++, Javascript
Security Information and Event Management (SIEM) technologies
IDS/IPS, Firewalls, and Anti-Virus/Anti-Malware technologies
Incident Response

Vulnerability Management:

Demonstrated experience in analyzing security alerts via Sentinel Security Information and Event Management (SIEM) (experience with other SIEM tools would be acceptable).
Demonstrated response, exposure to and partial or full ownership of Security Incidents.
Demonstrated knowledge of the full Incident Response cycle: Identification, Protection, Detection, Response, Recover.
Adherence to Standard Operating Procedures for the SOC.

Pay Transparency: The typical base pay for this role across the U.S. is: $38.00 - $40.00 /hr. Non-exempt positions are eligible for overtime at a rate of 1.5 times the base hourly rate for all hours worked in excess of 40 in a work week, or as required by state or local law. Final offer amounts, within the base pay set forth above, are determined by factors including your relevant skills, education and experience. Full-time employees are eligible to select from different benefits packages. Packages may include medical, dental, and vision benefits, health savings accounts with qualified medical plan enrollment, 10 paid days off, 3 days paid bereavement leave, 401(k) plan participation with employer match, life and disability insurance, commuter benefits, dependent care flexible spending account, accident insurance, critical illness insurance, hospital indemnity insurance, accommodations and reimbursement for work travel, and discretionary performance or recognition bonus. Sick leave and mobile phone reimbursement provided based on state or local law.

Consent to Communication and Use of AI Technology: By submitting your application for this position and providing your email address(es) and/or phone number(s), you consent to receive text (SMS), email, and/or voice communication whether automated (including auto telephone dialing systems or automatic text messaging systems), pre-recorded, AI-assisted, or individually initiated from Aditi Consulting, our agents, representatives, or affiliates at the phone number and/or email address you have provided. These communications may include information about potential opportunities and information. Message and data rates may apply. Message frequency may vary.
You represent and warrant that the email address(es) and/or telephone number(s) you provided to us belong to you and that you are permitted to receive calls, text (SMS) messages, and/or emails at these contacts. You also acknowledge and agree to Aditi Consulting LLC’s use of AI technology during the sourcing process, including calls from an AI Voice Recruiter. AI is used solely to gather data and does not replace human-based decision-making in employment decisions.  Calls may be recorded.

Consent is not a condition of purchasing any property, goods, or services. You may revoke your consent at any time by replying “STOP” to :messages or by contacting privacy@aditiconsulting.com.

For information about our collection, use, and disclosure of applicant's personal information as well as applicants' rights over their personal information, please see our Privacy Policy

#AditiConsulting
#26-03199

Aditi Consulting vacatures

Info Security Analyst

Never Miss a New Opportunity