Cybersecurity Analyst (2nd Shift)

BUILT ON TRUST. DRIVEN BY PROTECTION.

DOT Security exists because businesses deserve a cybersecurity partner they can trust. As cyber threats became more sophisticated and disruptive, organizations needed more than technology; they needed experts who could help protect their people, operations, and livelihoods. Born from Impact Networking during a time when that need was rapidly growing, DOT Security was created to deliver a more proactive, personalized approach to cybersecurity.

What makes DOT special is that we've never lost sight of why we started. We exist to help organizations operate with confidence, while investing in talented people who are passionate about solving complex challenges and protecting what matters most. We've built something special, but we're far from finished. The people who join DOT today will help define what comes next.

JOB OVERVIEW

As a Cybersecurity Analyst, you’ll be on the front lines of defense, working with a highly motivated team focused on analyzing, developing, and delivering solutions to stop adversaries. You’ll dig into alerts from defensive security systems and tools (such as IDS alerts, firewalls, and network logs) and decide whether each one represents a real threat.

This is an on-site position at our Security Operations Center in Mettawa, IL.

RESPONSIBILITIES

Day to day, you will:

• Monitor and analyze real-time alerts from our SIEM and other security tools to determine their cause.
• Investigate network traffic, interpret logs, and analyze packet captures.
• Detect, investigate, and alert on possible attacks, intrusions, anomalous activity, and misuse, while distinguishing real threats from benign activity.
• Correlate information from sources across the enterprise to build situational awareness and gauge the effectiveness of an observed attack.
• Investigate phishing emails.
• Escalate events and incidents following established procedures and playbooks.
• Document your findings and actions so they can be clearly shared with internal and external stakeholders.

As you grow with us, you’ll also have opportunities to:

• Proactively hunt for threats and spot adversary activity that doesn’t trigger automated alerts.
• Run intelligence-driven threat hunts to identify indicators of compromise (IOCs) and adversary tactics, techniques, and procedures (TTPs).
• Analyze intrusion sets to understand the weaknesses exploited, the methods used, and the impact on systems.
• Hunt for phishing campaigns and emerging attack vectors.
• Tune security tools for blocking, reporting, and proactive detection based on our customers’ business needs.
• Contribute to projects that strengthen customer environments using lessons from incident response and threat hunting.
• Develop and refine detection rules, automation playbooks, and security policies.

QUALIFICATIONS & EXPERIENCE

Skills and abilities:

• Strong critical thinking and problem-solving skills.
• Strong written and verbal communication skills, including the ability to explain things clearly to non-technical stakeholders.

Cybersecurity knowledge:

• Knowledge of current threats and vulnerabilities.
• Familiarity with the MITRE ATT&CK framework (hands-on experience applying it is a plus).
• Knowledge of authentication, authorization, and access control methods.
• Understanding of defense-in-depth principles and network security architecture.
• Understanding of IT security principles and methods, such as firewalls, demilitarized zones (DMZ), virtual private networks (VPN), and encryption.

Networking and infrastructure:

• Understanding of network traffic flows, including Transmission Control Protocol (TCP) & Internet Protocol (IP), the Open System Interconnection (OSI) Model, and the IT Infrastructure Library (ITIL) framework.
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), and directory services.
• Knowledge of Windows/Unix ports and services.

Nice to bring:

• Hands-on experience with Security Information and Event Management (SIEM) platforms or log management systems.
• Experience in an IT infrastructure role such as Systems Administrator, Network Administrator, Systems Engineer, or Network Engineer.
• Ability to analyze malware.
• Understanding of system and application security threats, such as buffer overflow, mobile code, cross-site scripting (XSS), PL/SQL injections, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.

Education

• Bachelor’s degree in Computer Science, Information Security, Information Technology, or Cybersecurity. Relevant work experience may be substituted for a degree.
• Master’s degree or four years of relevant work experience is a plus.

Certifications

• CompTIA Security+ or CompTIA CySA+ is preferred.
• Also highly valued: TCM Security – PSAA (Practical SOC Analyst Associate), ECTHP (Certified Threat Hunting Professional), or BTL1 (Blue Team Level 1).

COMPENSATION

Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs.

DOT Security may offer applicable incentive compensation plans depending on role and/or department.

Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process.

BENEFITS WE TAKE PRIDE IN

• 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards
• Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave
• Development and growth opportunities with on-going training & continued education reimbursement
• 401(K) & retirement plans with complimentary financial advisory services
• Comprehensive health, disability, life, dental, and vision plans

WORK AUTHORIZATION & IMMIGRATION SPONSORSHIP

Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements.

Certain positions within DOT Security may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a “U.S. Person,” as defined by law, or otherwise be eligible to obtain any required government authorizations.

RECRUITMENT COMMUNICATIONS NOTICE

Please Note: All recruiting operations for DOT Security are managed by the Impact Networking Talent Acquisition Team. As a result, candidates should expect recruitment-related communications including application updates, interview scheduling, requests for information, and offer discussions to come from members of the Impact Talent Acquisition team.

We appreciate your interest in DOT Security and look forward to getting to know you.