workday
Offensive Security Analyst
Sonoco
IND
Full-time
Mid · 5+ years experience
Onsite
Discovered 3 weeks ago
SIEMEDRCrowdStrikeAzureO365Active Directory
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
SIEMEDRCrowdStrike
Key Skills for This Role
SIEMEDRCrowdStrikeAzureO365Active Directory
Full Job Posting
Primary Responsibilities
- Plan, conduct, and document iterative, hypothesis-based threat hunts.
- Analyze and investigate anomalies for potential risk across the full spectrum of cyber threats.
- Review and analyze Security Information and Event Management (SIEM) alerts to develop hunt hypotheses.
- Propose, discuss, and document custom searches for automated detection of threat actor activity based on hunt findings.
- Utilize open-source intelligence to inform hunt hypothesis development.
- Track and document cybersecurity incidents from detection to resolution.
- Provide computer forensic support during investigations, including evidence seizure, computer forensic analysis, and data recovery.
- Conduct malware analysis including static and dynamic analysis of complex malware.
- Proactively assess the compute environment for patterns and anomalies, tagging events for Tier 1 & 2 monitoring.
- Collect and analyze data from compromised systems using EDR agents and custom scripts.
- Attend daily Agile Scrum meeting and report progress on activities.
- Support the development of deliverables including Hunt Hypotheses, Hunt Reports, Detection Logic, and Incident Reports.
- Respond to cybersecurity major incidents and assist with mitigation, remediation, and post incident reviews. Knowledge & Skills Required:
- Minimum of 5 years of experience in cybersecurity threat hunting or incident response roles.
- Proficiency with threat hunting methodologies, tools, and techniques.
- Experience with IT Service Management ticketing systems (ServiceNow preferred).
- Strong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory.
- Advanced knowledge of Security Information and Event Management (SIEM) systems.
- Experience with Endpoint Detection and Response (EDR) agents such as CrowdStrike.
- Ability to conduct malware analysis, including static and dynamic analysis.
- Excellent communication and teamwork skills.
Education
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Sonoco
Production Person
Brantford, CAN
Discovered YesterdayFull-time
Production Worker
Edmonton, CAN
Discovered 3 days agoContract, Full Time
Payroll Specialist II
Charlotte, USA
Discovered 1 weeks agoFull-time
Production Associate I
Portland, USA
Discovered 1 weeks agoFull-time
Industrial Maintenance Reliability Tech
Putnam, USA
Discovered 1 weeks agoFull-time
Production Associate
Montgomeryville, USA
Discovered 1 weeks agoFull-time
Shipping Clerk
Conyers, USA
Discovered 1 weeks agoFull-time
Analytical Chemist
Wantage, GBR
Discovered 1 weeks agoFull-time