Security Analyst I - Hybrid

As a Security Analyst I at Cyderes, your main responsibilities will include performing deep dive investigations into security threats, conducting threat hunting on customer networks, and providing proactive security investigations. You’ll also be involved in incident investigations, understand indicators of attacks, and maintain updated documentation and runbooks.

To be eligible for the Security Analyst I position at Cyderes, you need at least one year of IT security experience along with a strong understanding of system administration across various operating systems. Additionally, experience with endpoint detection software and knowledge of leading SIEM platforms is crucial. Having or working towards relevant certifications like Sec+, CEH, or SANS is also important.

In your role as Security Analyst I at Cyderes, the MITRE ATT&CK framework serves as a critical tool for mapping client use cases to specific tactics and techniques, helping you analyze their security posture and identify potential vulnerabilities. Your capacity to implement this framework will enhance your threat detection and response capabilities.

While not mandatory, having basic scripting or development experience in languages such as Python, JavaScript, PowerShell, or bash is highly beneficial for a Security Analyst I at Cyderes. This skill helps in automating processes and enhancing analysis efforts during security investigations.

As a Security Analyst I at Cyderes, you can expect a collaborative hybrid work environment where teamwork and expertise are emphasized. With the opportunity to participate in an after-hours on-call rotation, you’ll be part of a global company that values ongoing professional development and supports a positive work culture.

In your answer, highlight specific incidents you’ve managed, detailing your approach to triaging events and coordinating responses. Be sure to mention any tools or frameworks utilized, such as the MITRE ATT&CK framework.

Discuss your strategies for proactively identifying threats, including the types of data you analyze and tools you use, like SIEM platforms. Providing examples of successful threat hunts will strengthen your response.

Mention the resources you utilize for staying current, such as industry blogs, webinars, threat intelligence reports, or professional networks. Demonstrating a commitment to continuous learning is key.

Outline your hands-on experience with various EDR tools, describing how you leveraged these technologies to detect and mitigate threats. Highlight any specific incidents where your use of such tools made an impact.

Share your communication approach, emphasizing clarity and simplicity. Discuss how you adapt your language based on the audience, ensuring that everyone understands the key points without getting lost in technical jargon.

In your response, touch on your understanding of networking concepts and how you analyze network artifacts to identify abnormal behavior, highlighting any specific tools you’ve used in your analysis.

Demonstrate your ability to remain calm and focused. Discuss your method for triaging tasks, communicating effectively with team members, and ensuring that all critical steps are carried out swiftly.

Share a specific project where you significantly contributed to improving security posture, detailing your role, the challenges faced, and the outcomes achieved. Focus on the value added to the organization.

Highlight how thorough documentation helps maintain knowledge continuity and supports effective incident response, referencing past experiences where this practice led to improved outcomes or efficiencies.

Be sincere about your motivation for applying at Cyderes, tying your career goals to the company’s mission and your desire to contribute to effective cybersecurity practices within the organization.