Job title: Senior Cybersecurity Analyst
Company: VDart
Job description: Job Title: Senior Cybersecurity AnalystLocation: Greensboro, USMandatory:As a Senior Cyber Security Analyst within the Global Cybersecurity Operations Center (CSOC) you will play a crucial role as a key technical expert responsible for managing and responding to advanced cyber threats, conducting in-depth investigations, and supporting the overall security posture. This role combines hands-on technical expertise with mentoring responsibilities, ensuring effective threat detection, incident response, and continuous improvement of SOC capabilities.What you will doAnalyze and respond to complex security incidents and alerts generated by SOC tools (e.g., SIEM, EDR, IDS/IPS)Investigate and resolve escalated incidents from Level 1 and Level 2 analysts, ensuring swift containment and remediationLead investigations into cybersecurity incidents, including malware infections, data breaches, and insider threatsPerform digital forensics to collect, analyze, and preserve evidence for legal or compliance requirementsProvide incident reports with detailed root cause analyses and actionable recommendationsUse threat intelligence to identify patterns and indicators of compromise (IOCs) relevant to the organizationWork closely with junior analysts to provide guidance, training, and mentorship, fostering a culture of growth and knowledge-sharingCollaborate with IT, cybersecurity, and business stakeholder teams to implement and improve security controlsSupport the continuous improvement of SOC processes, tools, and technologies to enhance efficiency and effectiveness.Identify gaps in detection and response capabilities and recommend improvements to SOC leadership.Who are you?Do you dream big? We do too, and we are excited to grow together. In this role, you will bring:Bachelor’s degree in Computer Science or a related 4-year technical degreeMinimum 7 years of experience in supporting cyber defense operations in highly complex enterprise networks. Experience in SOC, SIRT, or CSIRT capacitiesOne or more of the following certifications: GIAC Certified Intrusion Analyst, GCIH Certified Incident Handler, GCIA Certified Intrusion Analyst, CISSPExperience in enterprise cybersecurity environment investigating targeted intrusions through complex network segmentsExpert understanding of Advanced Persistent Threat (APT), Cybercrime, and Hacktivist tactics, techniques, and procedures (TTPs)Subject Matter Expert in cybersecurity principles, threat lifecycle management, incident managementComprehensive knowledge of various operating systems (Windows, OS X, Linux), network protocols, and application layer protocolsDemonstratable experience in scripting languages (may include Powershell, Python, PERL, etc.)Understanding of the Cyber Kill Chain methodology, the NIST framework, the MITRE ATT&CK framework, and SANS Critical Security controlsWorking knowledge in modern cryptographic algorithms and systemsExperience working with and tuning signatures, rules, signatures, and security technologies (IDS/IPS, SIEM, Sandboxing tools, EDR, email security platforms, user behavior analyticsNetwork design knowledge including security architectureStrong analytical and technical skills in network defense operations including experience with incident handling (detection, analysis, triage)Conceptual understanding of cyber threat huntingPrior experience and ability analyzing cybersecurity events to determine true positives and false positives. Including cybersecurity alert triage, incident investigation, implementing countermeasures, and managing incident responsePrevious experience with SIEM platforms and log aggregation systems that perform collection, analysis, correlation, and alertingAbility to develop rules, filters, views, signatures, countermeasures, and other cyber defense platforms as well as the ability to support analysis and detection continual improvementKnowledge of new and emerging cybersecurity technologiesAbility to create technical documents as well as stakeholder sitreps and briefing documentsPreferred Qualifications:Deep Cybersecurity Operations Center experience in the following: intelligence driven detection, security principles, threat lifecycle management, incident management, digital forensics and investigations, network monitoring, endpoint monitoring, OT security principlesCSOC Process Management experience, to include: process and procedure management, CSOC initiative management, continual operational improvementPreferred certifications: CISSP, GCIH, GCIA, Linux+, CCNA, CCNPAbility to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to both business leaders/key stakeholders as well as technical teams and SMEsDemonstrated knowledge in cyber defense policies, procedures, and regulationsKnowledge of cyber vulnerability management processesKnowledge of common user and system authentication and authorization mechanismsDays are M-F 2pm to 10pm Eastern time Must be onsite Greensboro
Expected salary:
Location: Greensboro, NC
Job date: Sat, 12 Jul 2025 22:57:35 GMT
Click Here to Apply for this Job!
Click here for more jobs in Greensboro NC
