Lead Security Analyst- Swing Shift
- SCOTTSDALE, AZ, United States
Applications open in a new tab.
Job details
- Posting language
- English
Original job description
Lead Security Analyst - Swing Full-Time, Exempt Location: This position is onsite in the Phoenix, AZ area We are looking for a Swing Shift Lead to join the Lumifi Cyber Analyst team. The Swing Shift Lead is expected to be hands on operationally and supervise the analysts on the swing shift, but more so focused on leading projects to improve the team, identify gaps and solutions, improve the documentation and processes, and prioritizing the case workload amongst the team. The Swing Shift Lead will have several direct reports of junior and senior analysts on the swing shift and will report to the SOC Manager. The shift will be Monday through Friday, 1pm to 9pm Phoenix Time or 12pm to 8pm. Primary Duties
- Aid in the development and revision of security operation center procedures, protocols, and systems
- Identify and lead projects with the focus of making technological and procedural improvements to SOC operations
- Ensure efficient and cost-effective staffing and scheduling
- Handle escalated customer facing issues and be the designated incident lead for major incidents
- Develop and execute training for all SOC functions
- Provide first-line supervision, mentoring, and leadership of team members
- Manage a staff of security analysts, hire and train new staff, conduct performance reviews, and provide leadership and coaching for team members
- Assist on an as needed basis with triaging alerts and threat hunting
- Maintain on-call hours to handle escalated events after hours and maintain the ability to provide rare emergency coverage in the SOC if needed
Requirements
- Define metrics and reporting strategies that effectively communicate successes and progress of the analyst team
- Ability to analyze packet captures/data and logs to perform incident response and identify potential compromises to customer networks
- Possesses a solid understanding of the TCP/IP protocol suite, security architecture, and common TTP’s (tactics, techniques, and procedures) used by threat actors
- Experience analyzing both log and packet data in a SIEM (RSA NetWitness, Azure Sentinel, Splunk, etc.)
- Strong understanding of incident response methodologies and reporting
- Excellent communication skills, both written and verbal
- Able to remain calm and handle high stress situations in a fast-paced environment
- Strong analytical and problem-solving skills
- Self-motivated and able to balance multiple concurrent projects
Preferred Qualifications
- Minimum of 6 years of experience performing triage/incident response in enterprise environments
- Minimum of four years of experience performing forensic analysis of logs and packet captures to identify malicious artifacts
- Prior experience mentoring/leading a small team
- Higher level security certifications (CEH, GCIH, GCFA, GCFE, GCTI, GCIA, GREM, GPEN, GFNA, OCSP, CISSP, CISM)
- Strong understanding of ATT&CK Framework, common web attacks, NIST or SANS Incident Handling Procedures, knowledge of Windows and Linux operating systems, and networking principle
Shift: 1pm to 9pm or 12pm to 8pm, Phoenix Time
Benefits Include:
- Recharge in Style: Need some downtime? We've got your back with self-managed time off to rest, recharge
- Great Healthcare Coverage: Your well-being is a priority for us. That's why we offer exceptional healthcare coverage to keep you in tip-top shape with 80% employer coverage.
- Holistic Well-Being: We're not just about the basics. Dive into our holistic well-being programs that cover everything from family planning to much, much more.
- Fully Stocked Snack Bar for our onsite team
- Comprehensive Professional Development Benefits: Regular training sessions and workshops, personalized career coaching, opportunities for conferences and seminars, and access to leading online learning platforms for self-paced skill development.
All candidates must be eligible to work in the U.S. for any employer. We are an E-Verify employer. Lumifi welcomes and encourages diversity in our workplace. All qualified applicants will receive consideration for employment without regard to race color, religion, sex, sexual orientation, gender identity, national origin or disability.
More about this job
Skills
- Scheduling
- Coaching
- Leadership
- Train crew members
- Reporting
- Incident response
- Microsoft Azure Sentinel
- Splunk
- Communication skills
- Problem solving
- CISSP
- CISM
- Microsoft Windows
- Linux