Analyst, Security Operations Center

At Brightspeed, we are reimagining how people live, work, play and connect by providing fast, reliable internet connections and an awesome customer experience in twenty states throughout the Midwest and South.

Backed by funds managed by Apollo Global Management, our vision is to accelerate the upgrade of copper to fiber optic technologies, bringing faster and more reliable internet service to many rural markets traditionally underserved by broadband providers, while delivering best-in-class customer experience.

Be a part of the team that will make this vision a reality….designing and building a world class fiber network and creating a customer experience second to none.

Check us out on the web!

We are currently looking for an Analyst, Security Operations Center to join our growing Operations team! In this role, you will report directly to the Manager, Security Operations Center. You will manage event and information intake to include intelligence reports, monitoring ticket queues, investigating reported incidents, and interacting with other security and infrastructure groups as necessary. You will be part of a critical team on-call 24x7 to manage critical incidents. You will work shift-based hours, sometimes holding night shifts.

BONUS POINTS FOR

Responsibilities

Ability to work shift hours, including night shifts.; Review incidents to assess their urgency and escalate incidents if necessary; Triage alerts; Correlate and analyze events and data to determine the scope of cyber security incidents; Recognize attacker tactics, techniques, and procedures as potential indicators of compromise (IOCs) to improve monitoring, analysis, and incident response; Assist in tuning SIEM and IDS alerting to reduce false positives, improve productivity, and improve detection capabilities; Develop automation playbooks; Provide prescriptive remediation guidance to IT and network teams; Document incident responses with the detailed root cause and recommendations; Provide 24x7 (on-call) support; Monitor and manage/support all event sources; Endpoint Protection Systems (EDR/XDR), and other security tools to monitor and manage security incidents; Use the SIEM, SOAR, DLP tools, Cloud Posture Management, Endpoint Management, Endpoint Protection Systems (EDR/XDR), and other security tools to monitor and manage security incidents; Participate in organizational projects, as required; Ticket & Ticket Management

Requirements

Associate's degree in Computer Science, Information Systems, Engineering, Technology, or related field or equivalent experience/training; Experience managing cases/incidents; Ability to think analytically; Robust creativity and problem-solving skills; Knowledge of technical systems and terminology; Proficiency in threat management analysis and dissemination; Proficiency in scripting languages; Advanced written and verbal communication skills

Nice to have

Bachelor's Degree in Computer Science, Information Systems, Engineering, Technology, or related field or equivalent experience/training; Information Security Certification, preferred:; GSEC; Security+; GIAC; Python or PowerShell scripting; Azure Sentinel and CrowdStrike experience; A solid understanding of networking, cyber security concepts; Aptitude in solving problems independently; Demonstrated problem-solving skills; Sound decision-making ability; Must be detail oriented, well organized, thrive in a sense-of-urgency environment, leverage best practices, and most importantly, innovate through any problem with a can-do attitude; Strong analytical and time management skills