Security Analyst II

at  Edgio

SUMMARY:

The Security Operations Center team at Edgio is the first line of defense against cyber attacks for its customers. SOC team is comprised of dedicated engineers to provide assistance to our customers on a 24x7x365 basis. Engineers use their prior security experience to monitor, support and bring context to detected security events. Our engineers work closely with SOC escalation teams, Security Core engineering and with Enterprise Support team to detect, properly escalate security incidents, threats and vulnerabilities, all the while following defined procedures for incident response and security event management. This is an opportunity to work with experienced security professionals to learn security operations methodology and industry best-practice.

Key Responsibilities :

• Monitor security alerts for Edgio customers
• Monitor (distributed) denial of service attacks at network and application levels
• Evaluate and triage security alerts
• Notify customers on security alerts of their interest
• Initiate and participate in war-room activities in response to threats and attacks
• Provision, deploy, configure and troubleshoot customer WAF and API protection ruleset
• Prepare vulnerability reports and follow up with appropriate teams for remediation
• Assess and analyze web application API protection and web traffic logs to help identify threats and potential vulnerabilities
• Assist customers with DDoS and threat mitigation on a live bridge
• Responsible for reviewing SIEM for alerts and anomalies
• Interact with customers by phone, chat, or trouble ticket on their security or reporting opportunity to provide an exceptional customer experience every day
• Ability to adjust to the unpredictable & changing work of cybersecurity.
• Proactively identify potential threats and develop recommendations for corrective actions based on industry research and patterns identified within the environment
• Identify, Research and validate protection against recently published Common Vulnerability & Exposure (CVE) reports for Edgio customers

Required Qualifications and Experience :

• 2 years experience working in Network Operations Center or Security Operations Center or verifiable education / credentials in IT / cybersecurity domain
• Strong written and verbal communication skills
• Knowledgeable about the current cybersecurity industry and trends with experience working in internet, web security, identity management and web fraud
• Possess understanding of web environments and architectures along with knowledge of HTTP, DNS, TCP/IP, FTP, and other internet protocols
• Knowledge of network troubleshooting tools, traceroute, ping, nmap, wireshark etc.
• Motivated self-starter who can work well with minimal supervision
• Ability to operate with urgency, focus, discipline, and minimal supervision
• Experience with multiple operating systems ( Unix/Linux Windows, MacOS )
• Experience with Python or other scripting languages

Preferred Qualifications :

• Previous experience in a CDN
• Bachelor’s Degree in Computer Science, Management Information Systems or relevant engineering/science fields or equivalent experience
• Exposure to web programming (HTML, javascript, ASP, JSP)
• An industry-recognized security certification (Security+, etc.)
• Experience with cloud platforms such as AWS, Azure, or Google Cloud
• Familiarity with Open Worldwide Application Security Project top 10

OUR FIRST TEAM IS IMPORTANT TO US. HERE ARE SOME OF THE BENEFITS YOU CAN EXPECT:

• Health and Wellness Benefits: Blue Cross PPO or High Deductible with HSA and an employer match.
• 401(k) match and employee stock purchase program.
• Basic and Voluntary Life Insurance with Employee, Spouse, and Dependent guarantee.
• Long-Term and Short-Term Disability.
• FSA, Dependent FSA and Limited FSA.
• Life Assistance Program.
• Discount Auto and Home Insurance through MetLife.
• Competitive Compensation: Base pay and benefits that are designed to be equitable and market competitive.
• Rewards for Total Performance: Incentive programs that provide exceptional rewards for exceptional performance.
• Generous Employee Referral Bonus Award Program.
• Employee Development Opportunities: Growth and coaching pathways designed to help our First Team reach their full career potential.
• Remote Friendly: Our Hub | Hybrid model enables you to work where you are personally most productive.
• Flexible Time Off.
• A diverse and global workforce.
  This job description is not an all-inclusive summary of duties or responsibilities. Job duties or responsibilities may change with or without advance notice

• Monitor security alerts for Edgio customers
• Monitor (distributed) denial of service attacks at network and application levels
• Evaluate and triage security alerts
• Notify customers on security alerts of their interest
• Initiate and participate in war-room activities in response to threats and attacks
• Provision, deploy, configure and troubleshoot customer WAF and API protection ruleset
• Prepare vulnerability reports and follow up with appropriate teams for remediation
• Assess and analyze web application API protection and web traffic logs to help identify threats and potential vulnerabilities
• Assist customers with DDoS and threat mitigation on a live bridge
• Responsible for reviewing SIEM for alerts and anomalies
• Interact with customers by phone, chat, or trouble ticket on their security or reporting opportunity to provide an exceptional customer experience every day
• Ability to adjust to the unpredictable & changing work of cybersecurity.
• Proactively identify potential threats and develop recommendations for corrective actions based on industry research and patterns identified within the environment
• Identify, Research and validate protection against recently published Common Vulnerability & Exposure (CVE) reports for Edgio customer