Title- Sr. Security Analyst/Engineer

Location- Redmond-WA (Onsite/Hybrid)

Term: Contract

Qualified Questions:

Ability to conduct T1 & T2 triage of security events (network events, email events, endpoint events, cloud events)
Ideally be familiar with Splunk ES, Crowdstrike, Proofpoint, Wiz to shave on training time
Familiarity with frameworks like NIST, ISO 27001, CIS Controls, or MITRE ATT&CK is crucial
Walk through your experience with the incident response lifecycle and your approach to handling various security incidents - Must have experience in s
Network security/ Application Security/ Cloud Security
Does candidate have min 3 years - Familiarity with frameworks like NIST, ISO 27001, CIS Controls, or MITRE ATT&CK is crucial
HAS YOUR CANDIDATE COMPLETED THE WRITE UP PORITION THAT WAS REQUESTED
Does your candidate have 3 years Network security/ Application Security/ Cloud Security

Job Description, Role & Responsibilities :

Analyst Work

Ability to conduct T1 & T2 triage of security events (network events, email events, endpoint events, cloud events)
Ability to drive security event investigations end to end
Ideally be familiar with Splunk ES, Crowdstrike, Proofpoint, Wiz to shave on training time
Escalate AD findings
Escalate external attack surface findings
Escalate network threat findings
Suggest detection rules for event findings
Tune FP detection rules

Operations Work

Contract work,