Cyber Security Analyst

Position Overview

SRP is seeking a motivated Cyber Security Incident Response Specialist to identify, analyze, and respond to security events across corporate and operational environments. This role is critical in safeguarding organizational assets and proactively countering emerging threats.

Key Responsibilities

• Identify, triage, and respond to cyber security events in SRP's corporate and operational environments
• Analyze data from multiple sources and tools to discover anomalous and adversarial behavior
• Maintain awareness of the current threat landscape utilizing threat intelligence from government and industry partners
• Develop alerts, reports, and dashboards within the SIEM to facilitate detection and triage
• Create playbooks and procedures to support detection and response scenarios
• Advise and support implementation of security controls and new defensive capabilities
• Analyze malware and suspicious files using static/dynamic techniques including sandboxing
• Develop a thorough understanding of IT/OT relationships, business value of OT systems, and potential attack vectors in OT environments
• Leverage knowledge of SRP's environment to conduct proactive threat hunts
• Participate in department on-call rotation to respond to after-hours events

Required Qualifications

• 1+ years of experience in an Operational Technology focused role, Security Operations Center, or cyber security incident response role, or 3 to 5 years of Information Technology and/or InfoSec experience
• Moderate to strong understanding of SIEM technologies (Splunk experience a plus)
• Understanding of Windows and Linux architectures, administration, and hardening
• Thorough understanding of the TCP/IP network stack, including common protocols and network topologies
• Experience with network traffic analysis and packet capture tools (Wireshark, Bro/Zeek, etc.)
• Familiarity with IDS/IPS technologies
• Knowledge of Enterprise antimalware/Endpoint Detection & Response (EDR) platforms
• Understanding of Microsoft Azure/M365 architectures and security features
• Experience with incident response and forensic analysis tools and procedures
• Familiarity with vulnerability management and mitigation concepts
• Programming or scripting experience (PowerShell, Python, etc.)

Preferred Qualifications

• Industry security certifications such as CISSP, SANS/GIAC (GSEC, GICSP, GRID, GCIP, GMON, GCIA, GCFA, etc), Security+, CCNA/CCNP Security

Benefits & Perks

• Pension Plan (at no cost to the employee)
• 401(k) plan with employer matching
• Medical, vision, dental, and life insurance available from the first day
• Over 200+ hours of PTO (includes vacation days, holidays, floating holidays, and sick leave)
• Parental leave (up to 4 weeks) and adoption assistance
• Wellness programs (including access to a recreation and fitness facility)
• Short and long-term disability plans
• Tuition assistance for both undergraduate and graduate programs
• 10 Employee Resource Groups for career development, community service, and networking