Cybersecurity Analyst

eTeam Inc is seeking a highly skilled Cybersecurity Analyst to join our Cyber Defense Services Team. As a Cybersecurity Analyst, you will play a critical role in developing actionable intelligence on advanced cyber threats to our services and our customers.

• Perform digital forensics and security incident response activities, including but not limited to:
• Effectively find and retrieve data from various operating systems, including Windows, Linux, MacOS, Unix, and Android
• Retrieving, cataloging, and safeguarding digital data related to cyber investigations
• Analyze large and unstructured data sets to identify trends and anomalies indicative of malicious activities
• Assist with creating security techniques and automation for internal use that enable the team to operate at high speed and broad scale
• Provide situational awareness on the current threat landscape and the techniques, tactics, and procedures associated with specific threats
• Pursue actionable intelligence on current threats as they relate to eTeam Inc's Information Governance
• Periodic on-call responsibilities

• Strong knowledge of recovering data from damaged or erased hard drives, tracing hacks, gathering and maintaining evidence, and writing and reviewing investigative reports
• Understanding of legal standards that guide criminal investigations
• Ability to work across a variety of technologies
• Strong foundation in cloud-native investigative techniques and incident response methodologies
• Strong understanding of authentication technologies and connectivity concepts
• Experience with network, operating system, and application security tools sets
• Firm understanding of cloud service models and a shared responsibility model (IaaS, PaaS, SaaS) across public cloud CSPs (AWS, GCP, Azure)
• Experience in analyzing cloud provider logs (e.g. CloudTrail, Stackdriver, Azure Monitor Logs) to identify and respond to security events
• Strong analytical, written, and verbal communication skills
• Able to work with a changing schedule that includes standard or non-standard business hours of work
• Ability to weigh business needs against security concerns and articulate issues to management
• Solid understanding and technical expertise in security architecture

• BS degree in Computer Science, MIS, Computer Engineering, or 8+ years equivalent technology experience
• 6+ years of work experience in a Security Operations or equivalent role
• 4+ years of hands-on experience in responding to threats in public cloud (AWS, GCP, Azure)
• 6+ years of experience with tracking APT groups and other high-grade threats
• 6+ years of experience in system, network, and/or application security
• 6+ years of experience building automation
• 6+ years of experience with SQL or other query languages