cyber defense analyst

Henkel

<div>
 
 About this Position
 
 This position is part of the Global Business Solution (GBS+), IT Department.
 
 
 
 What You&acute;ll Do
 
 
 
 <ul>
 <li>
 Monitor, analyze and prioritize security events
 </li>
 <li>
 Investigate, contextualize and remediate security incidents based on playbooks and individual analysis leveraging data from different source and tools
 </li>
 <li>
 Provide consultancy to internal and external parties in order to reduce the impact of security incidents
 </li>
 <li>
 Coordinate and support the containment and eradication of security incidents within Henkel&rsquo;s environment
 </li>
 <li>
 Propose, analyze, and introduce new technologies or products to increase the information security level in Henkel (based on defined risks)
 </li>
 <li>
 Keeps up to date with the latest security and technology developments
 </li>
 <li>
 Research/evaluates emerging cyber security threats and ways to manage them
 </li>
 <li>
 Review past incidents and identify attack trends
 </li>
 <li>
 Hunt for cyber-related threats from various threat intelligence sources
 </li>
 <li>
 Identify and monitor the Tactics, Techniques, and Procedures (TTPs) employed by cyber threat actors
 </li>
 <li>
 Be a leading source of knowledge in information security and intelligence matters
 
 
 </li>
 </ul>
 
 What makes you a good fit
 
 
 
 <ul>
 <li>
 Bachelor's degree in Networks Engineering, Computer Science, Business informatics, or any relevant study
 </li>
 <li>
 2-4 years of relevant work experience
 </li>
 <li>
 Fluent English speaker
 </li>
 <li>
 Excellent communication, analytical and report-writing abilities
 </li>
 <li>
 Knowledge of IT forensic &amp; incident response, threat intelligence, risk management, endpoint security, network administration, cryptography, weak point analysis, related tools and techniques are preferable
 </li>
 <li>
 Knowledge and understanding of threat intelligence cycles, collection management, and TI application towards operational goals is preferable
 </li>
 <li>
 Ability and willingness to conduct in-depth analysis of the tools and tradecraft used by actors of all types is preferable Experience with TI platforms such as MISP &amp; OpenCTI is a plus,
 </li>
 <li>
 Relevant certifications (e.g. CISM, CISA, CISSP, CSX, PMP, ITIL) are preferable. Master's degree in a respective field is plus
 
 
 </li>
 </ul>
 
 Some perks of joining Henkel
 
 
 
 <ul>
 <li>
 Flexible work scheme with flexible hours, hybrid work model, and work from anywhere policy for up to 30 days per year
 </li>
 <li>
 Diverse national and international growth opportunities
 </li>
 <li>
 Globally wellbeing standards with health and preventive care programs
 </li>
 <li>
 Gender-neutral parental leave for a minimum of 8 weeks
 </li>
 <li>
 Employee Share Plan with voluntary investment and Henkel matching shares
 </li>
 <li>
 Comprehensive Health Insurance for employee + dependents
 </li>
 <li>
 Employee Assistance Program provides a wide range of mental health and wellbeing benefits
 
 
 </li>
 </ul>
 At Henkel, we come from a broad range of backgrounds, perspectives, and life experiences. We believe the uniqueness of all our employees is the power in us. Become part of the team and bring your uniqueness to us! We look for a diverse team of individuals who possess different backgrounds, experiences, personalities and mindsets.
</div>

Cyber Defense Analyst

The Newberry Group

<div>Who We Are&hellip; 
Newberry Group is a performance-driven government services and solutions firm that provides security compliance, program governance, consulting, and customized solutions for public sector clients nationwide. 
The strength of our company is a direct reflection of our highly skilled and talented workforce.
Job Summary
Newberry Group's Public Sector Division is seeking Real Time Cyber Analysts with the expertise to support a 24/7 Cyber Network Defense (CND) Operation for Department of Defense networks in Ford Island, Hawaii. This includes performing real-time cyber threat intelligence analysis, correlating actionable security events, performing network traffic analysis using raw packet data, and participating in the coordination of resources during the incident response process. 
 
Candidates must hold an active Secret or interim Secret clearance. Additionally, candidates must have the ability to obtain an interim-Top Secret clearance and be able to possess a Top-Secret w/ SCI clearance in the future. 
 
Location 
Ford Island, HI 
Work is to be performed on-site and is subject to change with communication from the client. There are three available shifts: 7am-3pm, 3pm-11pm, and 11pm-7am. 
 
Salary 
$100,000 to $120,000
Responsibilities and Duties<ul><li>
Review DoD and open source intelligence for threats.</li><li>
Identify Indicators of Compromise (IOCs) and integrate those into sensors and SIEMs.</li><li>
Triage alerts to identify malicious actors on customer networks.</li><li>
Assist T1 analysts with triage and analysis.</li><li>
Complete moderate-level cyber analysis of potential events.</li><li>
Report incidents to customers and USCYBERCOM.</li></ul>
Basic Qualifications and Skills Required<ul><li>
Bachelor's degree and 2+ years of prior relevant experience; additional work experience or Cyber courses/certifications may be substituted in lieu of a degree.</li><li>
Demonstrated understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.</li><li>
Motivated self-starter with strong written and verbal communication skills, and the ability to create complex technical reports on analytic findings</li><li>
DoD 8570 IAT level II or higher certification, such as CompTIA Security+ CE, ISC2 SSCP, SANS GSEC prior to starting.</li><li>
DoD 8570 CSSP-A level Certification, such as CEH, CySA+, GCIA, or other certification, is required within 180 days of hire.</li><li>
Demonstrated commitment to training, self-study, and maintaining proficiency in the technical cybersecurity domain, and an ability to think and work independently.</li><li>
Strong analytical, troubleshooting, and critical thinking skills.</li><li>
Willing to perform non-rotating shift work.</li><li>
Must be a U.S. citizen.</li></ul>
Preferred Qualifications and Skills<ul><li>
CND experience (Protect, Detect, Respond, and Sustain) within a Computer Incident Response organization.</li><li>
Demonstrated understanding of the life cycle of network threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).</li><li>
Advanced understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.</li><li>
Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g., Netflow, Full Packet Capture), and other attack artifacts in support of incident investigations.</li><li>
In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g., ArcSight, Splunk, Nitro/McAfee Enterprise Security Manager, QRadar, LogLogic).</li><li>
Experience and proficiency with any of the following: Anti-Virus, HIPS/HBSS, IDS/IPS, Full Packet Capture, Network Forensics.</li><li>
Experience with malware analysis concepts and methods.</li><li>
Unix/Linux command line experience.</li><li>
Scripting and programming experience.</li><li>
Familiarity or experience in Intelligence Driven Defense and/or Cyber Kill Chain methodology.</li><li>
Existing 8570 CSSP Analyst Certifications (CEH), CySA+ etc, or the ability to obtain within the customer's timeframe.</li></ul>
Benefits and Perks
In addition to competitive wages, Newberry Group offers an outstanding benefits package. This includes medical coverage with two plan options (HDHP or PPO), dental and vision coverage, personal time off, paid holidays, parental leave program, telecommuting if available, retirement savings accounts (Pre Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, and employee assistance program.
The Newberry Group, Inc. is an Equal Opportunity Employer &ndash; EEO/AA/Disability/Veterans.
ClKcExqsaY</div>

Real Time Cyber Analyst

Akima

<div>Company Overview:

Work Where it Matters 
Akima Systems Engineering (ASE), an Akima company, is not just another federal systems support contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. 
At ASE, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. 
For our shareholders, ASE provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. 
For our government customers, ASE delivers solutions in maritime IT, systems engineering, and integration across the Department of Defense and stands ready to help improve operational performance at a reasonable and sustainable cost. 
As an ASE employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.
Description:

Akima Systems Engineering is looking for a Service Desk Administrator to work on Shaw Air Force Base, SC. Our Service Desk Administrator provides front-line customer service desk support, responsible for responding to and resolving computer, printer, and network issues. Customers contact the Service desk in-person, by phone, using Remedy and/or by sending emails. This position involves a high degree of quick decision making and detailed task management to ensure all work orders not resolved at the Service Desk are immediately assigned to the appropriate IT groups. Excellent customer service skills are mandatory. The place of performance for this role is on-site at USARCENT G6 on Shaw Air Force Base in Sumter, SC. 
This is a full-time on-site position. No remote or hybrid work schedule available. To join our team of outstanding professionals, apply today!
Responsibilities:
<ul><li>The Contractor shall perform Cyber Security Analyst duties and responsibilities for the G6 Information Systems Division (ISD).</li><li>
The Contractor shall O&amp;M Network Access Control System(s) to examine potential security violations and determine if the installation campus area network (I-CAN) IA policy has been violated, breached, circumvented to make an assessment on the impact and provide report to Information System Security Manager (ISSM) IAW technical exhibit 2. The Contractor shall disable, re-enable, and delete user workstations as required.</li><li>
The Contractor shall monitor, analyze, and detect unauthorized activity on the USARCENT networks. The Contractor shall attend planning working groups for Computer Network Defense (CND).</li><li>
The Contractor shall diagnose, resolve, and document network system security problems in response to security incidents with current security tools and products.</li><li>
The Contractor shall scan, monitor, and verify compliance with security policy, procedures, Information Assurance Vulnerability Alert, and technical requirements in conjunction with network and system administrators IAW technical exhibit 2.</li><li>
The Contractor shall utilize Cyber Security (CS) tools as directed by the USARCENT G6 leadership, to include the following: Assured Compliance Assessment Solution (ACAS) and Network Access Control (NAC).</li><li>
The Contractor shall coordinate with the USARCENT G6 Network Team to install Government purchased perimeter defense systems including but not limited to intrusion detection systems, firewalls, grid sensors, and network rule sets to block sources of malicious traffic.</li><li>
The Contractor shall establish and maintain compliance in support of the Information Assurance Vulnerability Management (IAVM). The Contractor shall provide IA subject matter expertise to the USARCENT G6 staff, COR, and ISSM.</li><li>
The Contractor shall implement IA policies, principles, and practices in the delivery of all IT services. The Contractor shall remain current on the latest Cyber Security (CS) trends, security products and assist in ensuring CS requirements have been met as part of the IT acquisition development process.</li><li>
The Contractor shall implement, maintain and document IA controls IAW the Risk Management Framework (RMF) and other Government accreditation programs. The Contractor shall understand and implement technical vulnerability corrections and specific IA security countermeasures.</li></ul>
Qualifications:
<ul><li>Minimum 18 months of experience in Cyber Security/ Information Assurance.</li><li>
Minimum 18 months experience in RMF, and appropriate Computing Operating Environment IAW DoD 8570.01-M, DoDD 8140, or the latest authoritative policy.</li><li>
Minimum Required: CompTIA Security+ (DoD 8570 IAT Level II baseline cert) Preferred: Certified Information Systems Security Professional (CISSP) &ndash; (ISC)&sup2;.</li><li>
Computer Network Defense Service Provider (CNDSP) services for DoD classified and unclassified networks.</li><li>
Active Top Secret Clearance.</li></ul>
Job ID: 2025-19887 Work Type: On-Site</div>

Cyber Security Analyst (Active Top Secret Clearance required)

Ford Motor Company

<div>At Ford Motor Company, we believe freedom of movement drives human progress. We also believe in providing you with the freedom to define and realize your dreams. With our incredible plans for the future of mobility, we have a wide variety of opportunities for you to accelerate your career potential as you help us define tomorrow&rsquo;s transportation.
This role will be focused on operating and improving Ford&rsquo;s Cyber Defense Center (CDC) efforts within the Office of the CETO organization. The CDC mission is to provide proactive and reactive security services to protect Ford Motor Company Global digital information assets from compromise. Ford Motor Company must be able to respond to information security-related incidents in a manner that protects corporate information and ensures the protection of additional information which might be affected by the incident. The Threat Integration Analyst is focused on integrating threat and intelligence information across Ford&rsquo;s security landscape including SIEM, SOAR, EDR, Intelligence, and other tools in order to protect any Ford Motor Company asset or asset of any subsidiary or joint venture worldwide.
Successful candidates must have a significant interest in the Cyber Defense background. The candidate should display strong technical depth that spans cloud, network, and hosts. Experience in understanding modern computing vulnerabilities, attack vectors and exploits is recommended. Leadership behaviors must include solid oral and written communications skills, focus on teamwork, and a high level of personal integrity. In this role, candidate will understand existing and emerging threat actors, and be able to identify rapidly changing tools, tactics, and procedures of attacks.
Candidates must be willing to work a Hybrid work pattern, with a 4 day in-office schedule.</div>
 <div>The minimum requirements we seek:
Bachelor&rsquo;s degree in a computer related field
 
Highly capable Python programming skills focused on Rest API&rsquo;s for organizing and moving data across myriad platforms and tooling
 
2+ years of experience with SIEM tools with preference for Chronicle
 
Strong deductive reasoning, critical thinking, problem solving, and prioritization skills.
 
Experience in a fast paced, high stress, support environment, able to work with a sense of urgency and pay attention to detail
 
Solid and demonstrable comprehension of Information Security including malware, emerging threats, attacks, and vulnerability management. 
 
Our preferred requirements:
2+ years prior SOC operational experience
 
Sound understanding of Cloud, TCP/IP and networking concepts.
 
In depth knowledge of servers, clients, various computer peripherals, network and/or Storage technologies
 
Thorough knowledge of multiple operating systems specifically Windows and (Mac or Linux)
 
Familiar with Ford Computing Infrastructure and application development life cycle (SDM)
 
Demonstrate high level of independent initiative, drive for results, quality methods and integrity</div>
 <div>What you&rsquo;ll be able to do:
Develop and implement in Python SOAR orchestration to integrate logs, events, data feeds, execute Incident Response actions, etc.
 
Create, enhance, and tune curated and custom SIEM threat detections
 
Partner with IT Operations teams for current and future log source ingestion and parsing into SIEM and SOAR environments
 
Technical project management for software upgrades and maintenance using the AGILE framework</div>

Cyber Automation Analyst

INFOCUS-IT

Job Title: Cyber Security Analyst &ndash; GRC (Governance, Risk &amp; Compliance) Department: Information Security / GRC Location: Delhi, India Role Overview: We are looking for an entry-level Cyber Security Analyst to support our GRC team in implementing security policies, conducting risk assessments, and ensuring regulatory compliance with SEBI, CERT-IN, NSE/BSE, and ISO 27001:2022 standards. Key Responsibilities: Assist in drafting and maintaining security policies, procedures, and guidelines. Support ISO 27001:2022 ISMS documentation and evidence collection. Help conduct risk assessments and maintain the risk register. Assist in regulatory compliance activities and audit reporting. Track and document cyber security incidents and maintain compliance records. Skills &amp; Competencies: Basic knowledge of ISO 27001:2022 and cyber security regulations (SEBI, CERT-IN, NSE, BSE). Proficient in MS Office (Excel, Word, PPT). Detail-oriented with strong process-following skills. Willingness to learn about risk assessment, vendor compliance, and regulatory guidelines. Qualifications: Graduate in IT / Computer Science / Cyber Security (preferred).Freshers or up to 1 year experience in GRC/Information Security.Certifications like ISO 27001 Foundation or CompTIA Security+ are a plus. Apply: Send your resume to support@infocus-it.comJob Types: Full-time, Permanent, Fresher, Internship Contract length: 6 monthsPay: &#8377;15,000.00 - &#8377;20,000.00 per monthBenefits:<ul><li>Paid time off</li><li>Work from home</li></ul>Work Location: In person

Cyber Security Analyst

Lenovo

<div>
 
 PFB the JD:
 
 
 
 
 
 Job Description
 
 
 
 
 Security Operations Centre (SOC) Analyst plays a vital role in Security delivery. As a SOC Analyst Level 3, you will be on the front line of Cyber Defense, detecting &amp; responding to Cyber Incidents as they happen. You will work with other team members to provide situational awareness through detection, containment, and remediation of IT threats. This job requires great attention to detail and general awareness of Cyber Security tools like SIEM, XDR, EDR, IDS/ IPS, ability understand various logs - network logs, sys logs, Firewall logs. As a SOC Analyst you are expected to have working knowledge in areas of networking, malware analysis, incident response, vulnerability management.
 
 
 * Threat &amp; vulnerability analysis
 
 
 * Investigate, document &amp; report Information security issues &amp; emerging trends
 
 
 * Analysis &amp; response to unknown vulnerabilities
 
 
 
 
 
 
 Responsibilities
 
 
 
 
 As a SOC Analyst - Level 3, you will:
 
 
 * Operate as detection and security incident response subject-matter expert
 
 
 * Technical subject-matter expert in SOC/ SIEM and supporting technologies (EDR, UEBA, etc.) to develop custom queries (e.g., KQL) and playbooks for the SOC analysts to utilize in their investigations.
 
 
 * Align and maintain detection capability to the Mitre attack framework.
 
 
 * Perform root cause analysis of detection failures, identify areas for improvement.
 
 
 * Drive the continuous development of detection capability for SOC
 
 
 * Manage, investigate, and resolve complex issues with the Security tooling.
 
 
 * Securely configure the SIEM, and other SOC solutions in accordance with relevant policy and regulation
 
 
 * Support the Threat hunters in executing complex data analysis.
 
 
 * Provide a point of escalation for SOC/ security detection technical service issues.
 
 
 * Ensure the relevant security tools are compliant with company standards and governance.
 
 
 * Contribute to existing Policy, procedures and process documentation enhancements
 
 
 * Define and implement technical governance processes for security tooling of SOC, SIEM and other security tools including AV, EDR, Defender Cloud.
 
 
 * Create and review detection technology high and low level designs.
 
 
 * Propose and identify automation opportunities resulting from incidents;
 
 
 * Provide recommendations to the Client team, on how to mitigate or avert the occurrence of any suspicious activity within their environment.
 
 
 * Provide In depth analysis to the user/customer about the security incidents (eg. Phishing attack)
 
 
 * Troubleshoot connector/ logger/ Manager for log retrievals
 
 
 
 
 * Prepare SOC Management Reports.
 
 
 * Analyzing &amp; preparing daily and monthly reports based on the devices which are being monitored
 
 
 * Creating Reports and Dashboards based on the customer requirement.
 
 
 * Creating Queries for the Rules requested by client for real time alerts.
 
 
 * Creating Reports which helps in providing the logs for the alerts, for finding any possible threats.
 
 
 
 
 * Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths.
 
 
 * Independently follow procedures to contain, analyze, and eradicate malicious activity.
 
 
 
 
 * Change Management/ Implementation: Independently implement changes to meet customer infrastructure needs within area of technical responsibility
 
 
 * Patch and Security Management: Apply patch and security changes per policy.
 
 
 * Configuration Management: Review Configuration Management Database (CMDB) entries to ensure they are complete and accurate.
 
 
 * Quality: Provide continual improvement recommendations for direct responsibility area (process improvement, technical standard updates, etc).
 
 
 * Project Management: Lead &amp; participate in customer and internal projects, including transformation.
 
 
 * Customer Relationship Management: Set expectations with customers and/or internal businesses/end users within defined parameters.
 
 
 * Teamwork: Work as part of a team, which may be virtual and/or global. Participate as part of a team and maintains good relationships with team members and customers
 
 
 
 
 
 
 Skill
 
 
 
 
 8 - 12 years of relevant experience
 
 
 
 
 Typical skills include:
 
 
 * Fine-tune SIEM and other SOC tooling to exclude noise and false positives
 
 
 * Create and fine-tune content in SIEM - correlation rules, Dashboard and Reports etc
 
 
 * Interact with SIEM, EDR and NDR vendors (TAC Support) to remediate any issues with tooling
 
 
 * Evaluate new solutions for SOC
 
 
 * Identify opportunities to improve overall capacity, playbook and runbook
 
 
 * Understanding of threat landscapes and threat modelling, security threat and vulnerability management, and security monitoring
 
 
 * Working knowledge of tools and techniques used by attackers to gain entry into corporate networks, including common IT system flaws and vulnerabilities.
 
 
 * Knowledge of industry standards such as ISO 27001, HIPAA, FedRAMP, Cloud Security Alliance, NIST frameworks and risk methodologies
 
 
 * Demonstrated experience in communicating complex security concepts, both verbally and in writing, to a variety of audiences
 
 
 * Must take ownership of tasks and demonstrate high degree of autonomy to ensure completion
 
 
 * Excellent understanding of related technologies (Networking, Operating Systems)
 
 
 * General Project Management (Expert)
 
 
 * Customer/Vendor Management (IExpert)
 
 
 * Business Analysis (Expert)
 
 
 * Has ability to perform/drive resolution of problems on individual products.
 
 
 * Able to communicate broad and specific concepts with team and to peers.
 
 
 * Able to produce documentation for use by team and customer.
 
 
 * Able to perform/drive resolution of problems on combinations and interactions of products
 
 
 * Strong verbal &amp; written communication skills
 
 
 * Proactive approach to meet &amp; exceed goals
 
 
 
 
 
 
 Qualification &amp; Experience
 
 
 
 
 Bachelor&rsquo;s degree in engineering (Electronics, Communication, Computer Science)
 
 
 
 
 8 - 12 years of relevant experience in SOC domain
 
 
 
 
 Strong understanding ITIL process
 
 
 
 
 Recognized Cyber Security certifications, such as CISSP, CISM, SANS, SABSA, OSCP are advantageous.
 
 
 
 
 Microsoft Security and compliance certifications such as SC-200, MS-500 and AZ-500 preferred
 
 
 
</div>

Security Operations Center Analyst

<div>Title: Cyber Security Analyst
 
Work Location: Bangalore
Work schedule: Rotational (2 days weekly off per week)
Mode: Hybrid
Job Summary:
We are seeking a skilled and proactive Cyber Security Analyst to join our cybersecurity team. The Analyst will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity incidents in real-time. This role involves working with advanced security tools, conducting initial triage, escalating threats, and helping to ensure the overall security of the organization's digital assets. 
Key Responsibilities:
<ul><li>Monitor SIEM dashboards, alerts, and security logs to detect suspicious activities or policy violations.
</li><li>Perform initial triage, investigation, and classification of security incidents.
</li><li>Respond to alerts and incidents following defined incident response procedures.
</li><li>Analyze data from firewalls, IDS/IPS, endpoint protection, email security, and threat intelligence platforms.
</li><li>Escalate critical incidents to Team Lead or incident response teams.
</li><li>Create and maintain incident tickets with detailed findings and actions taken.
</li><li>Contribute to the continuous improvement of SOC processes, use cases, and playbooks.
</li><li>Assist in threat hunting and proactive identification of anomalies across the network.
</li>Generate regular and ad hoc reports on SOC metrics, incident trends, and findings. 
<li>
</li></ul>Required Skills and Qualifications:
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience).
</li><li>2 to 4 years of experience in cybersecurity or SOC operations &amp; Monitoring.
</li><li>Understanding of cybersecurity principles, attack vectors, and threat detection.
</li><li>Experience with SIEM platforms (e.g., Splunk, QRadar, Palo Alto Cortex XSIAM, etc.).
</li><li>Familiarity with common security tools (EDR, IDS/IPS, vulnerability scanners).
</li><li>Strong analytical and problem-solving skills.
</li><li>Good communication skills and ability to work in a fast-paced team environment.
</li>Knowledge of MITRE ATT&amp;CK framework, TCP/IP, DNS, HTTP, and other protocols. 
<li>
</li></ul>Preferred Qualifications (Nice to Have):
<ul><li>Industry certifications: Security+ , CEH , GCIA , GCIH , Palo Alto Certified , or similar.
</li>Experience with scripting (Python, PowerShell) or automation (SOAR platforms). 
<li>
</li></ul>Shift and Work Environment:
<ul><li>Shift work including nights, weekends, and holidays (24/7 coverage).
</li><li>On-call rotation may apply.
</li>2 days weekly off per week. 
<li>
</li></ul>Hands-On Knowledge on below mentioned tools is good to have.
<div><ul><li>Palo Alto XSIAM / Cortex XDR
</li></ul><ul><li>Recorded Future
</li></ul><ul><li>Microsoft Defender / O365 Email DLP
</li></ul><ul><li>Proofpoint SEG
</li></ul><ul><li>Zscaler ZIA / ZPA
</li></ul><ul><li>Azure Active Directory / M365
</li></ul><ul><li>Intune / SCCM
</li></ul><ul><li>Virus Total / CISA / CIS Benchmarking</li></ul></div></div>

Search 4841+ Cyber defense analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

4841 cyber defense analyst jobs NEAR_ME

Cyber Defense Analyst

Real Time Cyber Analyst

Cyber Security Analyst (Active Top Secret Clearance required)

Cyber Automation Analyst

Cyber Security Analyst

Security Operations Center Analyst

Cyber Security Analyst