PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


JOB: Security Operation Center (SOC) Analyst
The Role
Seeking a Security Operation Center (SOC) Analyst to join our Cybersecurity team.
The SOC Analyst will be responsible for day-to-day security threat monitoring, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positive, or false negatives and work with incident responders on known or suspected security threats. The Analyst will work on threat intelligence gathering and integration, forensics, and incident response that adhere to best practices and recognized control frameworks. 
Primary Responsibilities
<ul>
<li>Responsible for working in Security Operation Center (SOC) team environment.</li>
<li>Investigate incidents using SIEM and UEBA technologies, packet captures, reports, data visualization, and pattern analysis.</li>
<li>Analyze, escalate, and assist in remediation of critical information security incidents.</li>
<li>Improve and challenge existing processes and procedures in a very agile and fast-moving information security environment.</li>
<li>Able to participate in an on-call rotation.</li>
<li>Perform real-time alert monitoring and risk mitigation.</li>
<li>Provide analysis and trending of security log data from many heterogeneous security devices across different layers.</li>
<li>Provide Incident Response (IR) support when analysis confirms the actionable incident.</li>
<li>Provide threat and vulnerability analysis as well as security advisory services.</li>
<li>Analyze and respond to previously undisclosed software and hardware vulnerabilities.</li>
<li>Investigate, document, and report on information security issues and emerging trends.</li>
<li>Integrate and share information with other analysts and teams.</li>
<li>Participate in security projects and assist network operations and engineering teams.</li>
</ul>

Qualifications
<ul>
<li>Bachelor's degree in a related field (Security, Forensics, or Computer Science is preferred)</li>
<li>5-7 years of overall IT professional experience or 3-4+ years of work experience Tier 1 and Tier 2 level security operations experience.</li>
<li>Desirable | Proven experience as a security and/or complianceanalyst, incident handler/responder, security engineer, or penetration tester.</li>
<li>Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&amp;CK framework).</li>
<li>Knowledge of technical security solutions (firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, AV, DLP, proxies, network behavioral analytics, endpoint, and cloud security).</li>
<li>In-depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications.</li>
<li>Good knowledge of common malware threats and attack methodologies.</li>
<li>Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, </li>
</ul>
Core Competencies
<ul>
<li>Accountable for the successful completion of multiple, individual projects simultaneously.</li>
<li>Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences.</li>
<li>Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate.</li>
<li>Work independently as a team representative of Information Security as well as showing excellent teamwork skills.</li>
<li>Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability.</li>
<li>Fundamental knowledge of network and system technologies and practices</li>
</ul>
Teams Culture &amp; Values
<ul>
<li>The Cybersecurity Team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Fintech Solutions business and security posture.</li>
<li>The Cybersecurity Team to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</li>
</ul>


Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Dallas Castle

Security Operations Analyst

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Security Defense Analyst to join our talented, dynamic team in support of the Department of Veterans Affairs customer.Veterans are encouraged to apply. The Cyber Security Threat Hunter will be part of a team that creates hypothesis driven investigations to search out Advanced Persistent Threats and Focused Operators. The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Key Responsibilities:<ul> <li>Provide proactive Advanced Persistent Threat (APT) and Focused Operator (FO) hunting, incident response support, and advanced analytic capabilities</li> <li>Profile and track APT/FO actors that pose a threat in coordination with threat intelligence support teams</li> <li>Review and analyze log files from various sources such as SIEM, packet captures, and host logs to report any unusual or suspect activities</li> <li>Develop and execute custom scripts to identify host-based indicators of compromise</li> <li>Provide targeted attack detection and analysis, including the development of custom signatures and log queries and analytics for the identification of targeted attacks</li> <li>Determine scope of intrusion identifying the initial point of access or source</li> <li>Recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Communicate effectively to all customers and stakeholders</li> <li>Provide executive level cyber security strategic recommendations along with security engineering recommendations and custom solutions to counter adversarial activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Provide identification of obfuscation techniques</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Knowledge of and ability to utilize cyber defense and vulnerability assessment tools</li> <li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li> <li>Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities</li> <li>Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations</li> <li>Knowledge of adversarial tactics, techniques, and procedures</li> <li>Knowledge of the common attack vectors on the network layer</li> <li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)</li> <li>Skilled in using security event correlation tools</li> <li>Knowledge of and ability to utilize malware analysis concepts and methodologies</li> </ul>Requirements<ul> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), Netflow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Experience with threat hunting advanced persistent threats</li> <li>In depth understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to communicate effectively to both technical and non-technical audiences</li> <li>Skilled in developing and deploying signatures</li> <li>Skilled in detecting host and network-based intrusions via intrusion detection technologies</li> <li>Skilled in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes</li> <li>Skilled in collecting data from a variety of cyber defense resources</li> <li>Skilled in recognizing and categorizing types of vulnerabilities and associated attacks</li> <li>Skilled in reading and interpreting signatures (e.g., snort)</li> <li>Skilled in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li> <li>Skilled in performing packet-level analysis</li> <li>Able to develop content for cyber defense tools</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform cyber defense trend analysis and reporting</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li> <li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li> <li>Ability to determine tactics, techniques, and procedures (TTPs) for intrusion sets</li> <li>Ability to conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Ability to reconstruct a malicious attack or activity based off network traffic</li> <li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.</li> <li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.</li> <li>Analyze and report organizational security posture trends.</li> <li>Analyze and report system security posture trends</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities</li> <li>Participation in rotational on-call support</li> </ul><h3>Relevant certifications and training preferred:</h3><ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company match</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.

Hines

Cyber Security Threat Hunter

The Insider Threat Analyst (Security Operations) will be part of a team that monitors for and investigates insider threat activity in a large federal agency. Discovered threat activity will be captured and documented in reports sent to cross organization leadership. The analyst will develop custom searches using a wide array of network and host-based security toolsets (Splunk, QRadar, Microsoft Defender etc.). The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Veterans encouraged to apply.<h3>Key Responsibilities</h3><ul> <li>Review and analyze log files from various sources such as SIEM, EDR, packet captures, and host logs to report any unusual or suspect activities </li> <li>Provide targeted detection and analysis, including the development of custom signatures and log queries and analytics for the identification of insider threats</li> <li>Monitor User Activity Monitoring (UAM) and User Entity Behavioral Analytics (UEBA) tools</li> <li>Determine scope of intrusion and recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed threat</li> <li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provide recommendations and custom solutions to counter insider threat activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Identify insider threat use-cases for automation using a security orchestration and automation product</li> </ul>Requirements<ul> <li>Must possess a minimum of three years experience performing in Insider Threat analysis</li> <li>Candidate MUST be proficient with Splunk Query Language </li> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), NetFlow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Experience using ticketing systems to include ServiceNow (SNOW) and BMC Remedy</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to develop content for cyber defense tools</li> <li>Ability to write insider threat reports to both technical and non-technical audiences; reports are evaluated for quality and clarity</li> </ul>Relevant certifications and training are a plus:<ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> <li>Certified Information Systems Security Specialist (CISSP)</li> <li>Splunk Core Certified Power User</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company contribution</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused solutions to organizations facing highly complex IT, digital, and cyber security challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Martinsburg

Insider Threat Analyst (Security Operations)

XOR Security

Job Description: 
XOR Security is actively seeking a Digital Forensics Incident Response (DFIR) Analyst to enable our operational counterparts advanced analytics support to promote the rapid analysis of national level cyber threats and incidents.  The ideal candidate will provide technical support of a 24x7 cyber program in the areas of incident  response,  insider  threat  investigations, forensics, cyber threats and information security. 
Corporate duties such as solution/proposal development, corporate culture development, mentoring employees, supporting recruiting efforts, will also be required.  
Position is contingent on successfully completing a program-based background investigation. 
Required Qualifications: 
<ul>
<li>Bachelor’s Degree in Information Technology, Cyber Security, Computer Science, Computer Engineering, or Electrical Engineering. </li>
<li>Active CISSP. </li>
<li>One or more of the following certifications: GCIA, GCIH, GCFA, GCED, or other Information Assurance Technician (IAT) Level III certification (CASP+ CE, CCNP Security, CISA, CCSP). </li>
<li>Demonstrated understanding  of  incident  response,  insider  threat  investigations, forensics, cyber threats and information security.  </li>
</ul>
<ul>
<li>A minimum of seven (7) years of professional experience with a solid understanding of incident response, insider threat investigations, forensics, cyber threats and information security.  </li>
<li>A minimum of five (5) years of hands-on experience with experience in the last two (2) years that includes host-based and network-based security monitoring, identifying and analyzing anomalous activities with familiarity in insider threat monitoring software, host- based forensic tools, intrusion detection systems, intrusion analysis functions, security information event management (SIEM) platforms, endpoint threat detection tools, security operations ticket management.  </li>
<li>Experience creating insider threat focused dashboards, reports and workflow diagrams.   </li>
<li>Experience  collecting  data  and  reporting  results;  handling  and escalating  security  issues  or  emergency  situations  appropriately;  providing incident  response  capabilities  to  isolate  and  mitigate  threats  to  maintain confidentiality, integrity, and availability for protected data.  </li>
<li>Experience with ad-hoc training to junior, mid, senior members of a cyber work force in a collaborative environment. </li>
</ul>
<ul>
<li>Subject matter expert in the field of digital media exploitation or forensics. </li>
<li>Existing Subject Matter Expertise of Advanced Persistent Threat or Emerging Threats. </li>
<li>Proficiency in utilizing various packet capture (PCAP) applications/engines and in the analysis of PCAP data. </li>
<li>Ability to work on-call during critical incidents or to support coverage requirements (including weekends and holidays when required). </li>
<li>Experience supporting a SOC program in incident response tools and techniques, specifically with forensics tools such as EnCase, Forensic Toolkit, etc. </li>
</ul>
<ul>
<li>Experience with static and dynamic malware analysis, including reverse engineering of binaries. </li>
<li>Familiarity with coding, scripting languages (BASH, Powershell, Python, PERL, RUBY etc.) or software development frameworks (.NET). </li>
<li>Previous hands-on experience with a Security Information and Event Monitoring (SIEM) platforms, Data Loss Prevention (DLP) systems, and log management systems that perform log collection, analysis, correlation, and alerting is required (preferably within Splunk or ArcSight). </li>
<li>Ability to develop rules, filters, views, signatures, countermeasures and operationally relevant applications and scripts to support analysis and detection efforts. </li>
<li>Understanding of hardware configurations and comfort with disassembling and reassembling computers and periphery devices. </li>
</ul>
<ul>
<li>Expert understanding of computer file systems, hard drive architecture and connection types. </li>
<li>In-depth experience with file system forensics, registry analysis, Internet history analysis, steganography and encryption detection and analysis, forensic media imaging, timeline analysis, email analysis, signature/hash analysis. </li>
<li>Ability and experience extracting and managing complex large data sets.  </li>
<li>Strong documentation and written communication skills with technical report writing experience </li>
</ul>
Desired Qualifications: 
<ul>
<li>Experience managing a technical team </li>
<li>Advanced troubleshooting skills </li>
<li>Hard drive and/or cellular phone repair skills </li>
<li>Forensic tool and script development </li>
<li>Metadata extraction and analysis </li>
</ul>
<ul>
<li>Network and intrusion analysis </li>
<li>Mobile/Cellular device analysis </li>
<li>Forensic video analysis </li>
<li>Digital forensic instructor </li>
<li>Software development </li>
</ul>
<ul>
<li>Database analysis/development </li>
<li>Reverse engineering </li>
<li>Application analysis </li>
<li>Network forensics </li>
<li>Intrusion analysis </li>
</ul>
<ul>
<li>Intelligence analysis </li>
<li>Social networking analysis </li>
<li>Law enforcement investigation </li>
<li>Finished intelligence report writing </li>
</ul>
Closing Statement: 
XOR Security offers a very competitive benefits package including paid health insurance coverage from first day of employment, 401k with a vested company match, vacation and supplemental insurance benefits. 
XOR Security is an Equal Opportunity Employer (EOE). M/F/D/V. 
Citizenship Clearance Requirement Applicants selected may be subject to a government security investigation - Applicants must meet eligibility requirements – US CITIZENSHIP.

Alexandria

Digital Forensics Incident Response (DFIR) Analyst

AmeriSave

AmeriSave Mortgage is currently seeking a SOC Manager, in the Atlanta market. The SOC (Security Operations Center) Manager supervises, leads, and mentors SOC teams) by drawing on a deep knowledge of security operations, enterprise business and security needs, architecture, and forensic and investigative expertise.  This individual must prioritize daily operational activities and ensure a high level of productivity and efficiency from the SOC.  Firsthand engineering experience is welcome, but significant analyst experience – including experience triaging and coordinating major incidents -- is a requirement.  A SOC manager must be able to demonstrate the ability to think through high pressure scenarios and direct his/her team appropriately.  This may include providing analysis and forensic expertise when necessary. Additionally, the manager must be able to communicate clearly, concisely, and accurately with Amerisave departments.  They should be a technical expert in tools, solutions, and processes, and can not only identify shortfalls and breakdowns, but also intuitively suggest and implement solutions.  They are expected to carry their expertise and authority into calls or meetings with internal customers and partners.  They may also be asked to contribute to discussions on personnel matters.At AmeriSave, we're one team with one shared dream - to be the best. We’re dedicated to building an inclusive culture where employees are empowered and supported to do their best work - whether from home or in the office. Why AmeriSave? What you'll find at AmeriSave is that we don’t just set you up for success, we set you up to WIN. Team members are provided with cutting edge origination software, CRM, marketing automation, data reporting / analytic software, and leading mortgage application technologies to help make more deals happen. Our culture at AmeriSave is casual and fun, and we offer competitive compensation and benefits.AmeriSave is the company you’ve been waiting to work for! 
<h3>Leadership Requirements:</h3>
<ul>
<li>Strong verbal/written communication and interpersonal skills to document and communicate findings, escalate critical incidents, and interact with internal customers and departments</li><li>Knowledge of enterprise security architecture as well as the intersection of business and security needs. </li><li>Must understand SOC teams, roles, and specialty functions.</li><li>Understanding of incident response methodologies and reporting.</li><li>Intuitive sense of user needs and how those translate to service delivery.</li><li>Good sense of conflict resolution and how to exercise available resources in the interest of sound, fair decision making.</li><li>Ability and desire to mentor junior and senior analysts.</li><li>Team leadership experience.</li><li>Outstanding communication skills and a willingness to speak with users and other departments. </li><li>Strong security intuition, critical thinking, and the ability to convey this through leadership and sound decision-making during outages, issues and incident response scenarios. </li></ul>
<h3>Technical Requirements:</h3>
<ul>
<li>Deep understanding of security technologies – Firewalls, IDS/IPS, SIEM, EDR tools, enterprise architecture, email filtering tools.</li><li>Experience performing forensic analysis of network logs and packets to identify compromise artifacts (6+ years).</li><li>Ability to identify actionable indicators of compromise based upon analysis of network forensic data.</li><li>Ability to analyze captured data or logs to perform incident response and identify compromises to customer networks</li><li>Strong research background and an analytical approach, especially with respect to event classification, event correlation, and root cause analysis preferred.</li><li>Experience using ticketing systems for tracking (JIRA, Remedy, Zendesk, ServiceNow, etc)</li></ul>
<h3>Qualifications:</h3>
<ul>
<li>Minimum of six years of consistent SOC experience performing triage/incident response in enterprise environments.  At least 2-3 years must be in a small-team/department leadership capacity.</li><li>Bachelor's degree in Information Security, Computer Science, Computer Engineering, or equivalent work experience.</li><li>Minimum of a GIAC security certification such as GCIA, GCIH, GREM, GPEN (or equivalent), multiple preferred.</li></ul>California Consumer Privacy Act Disclosure AcknowledgmentEmployment Applicants, New Hires, and Employees Residing in CaliforniaAmeriSave Mortgage Corporation’s California Consumer Privacy Act Policy Statement (“Policy”) can be reviewed here: <a href="http://www.amerisave.com/privacy-policy/" rel="noopener noreferrer nofollow ugc" target="_blank">www.amerisave.com/privacy-policy</a>.   When AmeriSave’s Human Resources Department makes future requests for personal information, the same Policy is applicable. By applying, you understand this acknowledgment covers current and future personal information requests. You also acknowledge the business purpose of the personal information collected and that future requests may occur while applying for a position at AmeriSave and/or during employment, if applicable.

Atlanta

Security Operations Center Manager

Apply to GCIA Cyber Security Jobs in companies remotely and near you. New GCIA Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Operations Analyst at PEAK6	Full Time Soc Analyst Analyst Incident Response GCFA
Cyber Security Threat Hunter at Maveris	Full Time Forensic Analyst Incident Response GCFA
Insider Threat Analyst (Security Operations) at Maveris	Remote Full Time Forensic Analyst GCFA
Digital Forensics Incident Response (DFIR) Analyst at XOR Security	Full Time Forensic CCSP Analyst Incident Response
Security Operations Center Manager at AmeriSave	Automation EDR GCIA GCIH GIAC

GCIA Cyber Security Jobs

0 GCIA Cyber Security Jobs. Page 1 of 1

5 closed gcia cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

GCIA Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

GCIA Cyber Security Jobs

0 GCIA Cyber Security Jobs. Page 1 of 1

5 closed gcia cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

GCIA Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter