Security Analyst - Hybrid in Philadelphia

- Experience with CrowdStrike for investigations, including query creation and execution - Ability to develop Dashboards in the Falcon Console - Familiarity with various components of the CrowdStrike Suite, such as Falcon Complete MDR console - Guidance for new users on effective investigation practices utilizing NG-SIEM - Knowledge of Indicators of Compromise (IOCs) - Solid understanding of TCP/IP, DNS, DHCP, and related protocols - Skill in analyzing network traffic and detecting anomalies - Proficient in endpoint detection and response (EDR) tools - Background in anti-virus and malware analysis - Awareness of the MITRE ATT&CK framework and similar incident response methodologies - Experience in triage, containment, and threat eradication - Capability to analyze and monitor logs to formulate potential attack theories - Ability to interpret logs from systems like servers, firewalls, and applications - Skill in identifying patterns and threats through log correlation across cybersecurity tools - Basic knowledge of scripting languages (Python, Bash, PowerShell) - Proficient in using regular expressions (regex) for data parsing - Understanding of the importance of vulnerability management and scanning - Familiarity with cloud security tools and practices (e.g., AWS GuardDuty, Microsoft Defender for Cloud) - Strong critical thinking and problem-solving abilities - Capability to analyze complex situations and make informed decisions under pressure - Excellent verbal and written communication skills for incident documentation and team collaboration - Skill in conveying technical concepts to non-technical stakeholders - Strong observational skills to identify anomalies and patterns - Willing to collaborate with fellow analysts, IT teams, and external stakeholders - Ability to remain calm and adaptable in high-pressure environments - Understanding of threat actor tactics, techniques, and procedures (TTPs) - Knowledge of emerging threats and vulnerabilities, and resources for threat investigations - Prior experience in a SOC or similar role is essential - Experience in managing real-world incidents