Network Security Analyst

Required Skills

• 5+ years of experience in cybersecurity operations, security monitoring, incident response, threat detection, or security investigations.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, NetWitness, or LogRhythm.
• Experience with EDR/XDR tools such as Microsoft Defender for Endpoint, CrowdStrike, or SentinelOne.
• Experience with security alert triage, incident investigation, threat detection, and incident response.
• Knowledge of MITRE ATT&CK, NIST cybersecurity/incident response frameworks, IOCs/IOAs, and common cyber threats.
• Experience with query languages such as KQL, SPL, Lucene, or ESQL.
• Scripting experience with PowerShell, Python, or Bash.
• Knowledge of Windows, Linux, networking, Active Directory, Microsoft Entra ID, and cloud security.

Preferred Skills / Certifications

• CompTIA Security+
• GIAC GCIH / GCIA
• Microsoft SC-200
• Certified SOC Analyst (CSA)
• Experience with Tenable, Qualys, Rapid7
• Experience with Proofpoint, IronPort, Abnormal.ai
• Experience with Zscaler, Prisma, Netskope
• Experience with VirusTotal, Recorded Future, MISP, Cisco Talos
• Experience with cloud security platforms such as Wiz, MDCA, Cortex Cloud, or Sysdig