Security Analyst

Gejits Infotech Inc is seeking an experienced Security Analyst to support information security operations, incident response, log monitoring, endpoint security, and coordination with a Managed Security Services Provider, preferably Secureworks. The selected candidate will serve as a key liaison between the organization and the MSSP, assist with SIEM/SOAR integrations, monitor security events, and support the deployment and health monitoring of security tools across multiple platforms.

This is an onsite job at State client office at Tallahassee, Florida.

Key Responsibilities

The Security Analyst will be responsible for:

• Acting as the primary liaison for daily operations between the organization and the Managed Security Services Provider, Secureworks.
• Reviewing current information security policies and processes to assist management with developing project goals.
• Performing computer incident response within the scope and capabilities of the MSSP.
• Assisting with incident response activities originating from sources outside the MSSP scope.
• Performing advanced analysis of security events and incidents reported by the MSSP and other monitoring platforms.
• Assisting with the identification and integration of security-related logs.
• Supporting deployment and health monitoring of MSSP-specific endpoint agents across physical and virtual IT platforms.
• Supporting deployment and health monitoring of non-MSSP endpoint agents across multiple platforms.
• Maintaining the health of log collection systems, IDS/IPS appliances, and other physical or virtual security appliances.
• Supporting continuous integration of relevant data sources and systems into MSSP, SIEM, and SOAR solutions.
• Providing management with regular status reports on project goals.
• Ensuring compliance with all data security and confidentiality procedures and policies.

Minimum Qualifications

The candidate must have:

• Minimum 4 years of experience working as a Security Analyst in an environment utilizing a Managed Security Services Provider, preferably Secureworks.
• Minimum 4 years of experience coordinating and conducting event collection, log management, and event management using SIEM or other log management systems.
• Minimum 4 years of experience with identity monitoring activities using SIEM or other log management systems.
• Minimum 4 years of experience researching and analyzing log sources used for security monitoring.
• Minimum 4 years of experience configuring and monitoring IDS/IPS, log collectors, firewalls, load balancers, web gateways, and other network traffic appliances.
• Minimum 4 years of experience with endpoint deployment solutions for installing security products and gathering telemetry on workstations and servers.
• Experience with tools such as SCCM, Altiris, KACE, Ivanti, or similar endpoint deployment platforms.
• Minimum 4 years of experience administering Microsoft Active Directory on-premises and Azure hybrid environments.
• Experience with account provisioning, enabling/disabling/resetting accounts, and managing Organizational Units and Groups.

Preferred Skills

• Experience with Secureworks or similar MSSP platforms.
• Experience with SIEM and SOAR platforms.
• Strong understanding of security event analysis, incident response, endpoint monitoring, and log management.
• Knowledge of hybrid Active Directory environments.
• Ability to work with technical teams, security teams, and management.
• Strong written and verbal communication skills.