Enable America Jobs

Monitoring organization network, endpoints for any cyber security events and anomalies using a variety of tools such as Palo Alto Cortex XDR, Rapid 7 insight IDR, insight VM and Code 42. Continuously analyzing, monitoring, and identifying security alerts information from all approved security devices, collection techniques and designated system logs. Providing detailed status updates on existing cyber security incidents daily to include follow up with client/customer to ensure satisfactory resolution. Coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities using the Rapid7 Insight IDR SIEM solution. Observing and analyzing traffic in order to learn valuable lessons from known malicious factors and to determine countermeasures against such threats. Interacting with cyber intelligence analysts conducting threat analysis operations as well as numerous IT professionals performing varying technical roles within the client organization. ? Making recommendations to senior management on results of analysis and working closely with other Information Technology groups to refine and enhance security controls. Developing standard operating procedures (sops) for network system security operations and incident response. Consistently maintaining involvement with the Support team at the client site, using e-mail and teleconferencing correspondence to close the gap as much as possible.In lieu of Masters degree , Bachelors plus five yr of experience is acceptable. May be required to travel to unanticipated locations for projects.