Security Analyst

Who We Are
Headquartered in Canada with locations across the United States and around the globe with a footprint on six continents, Bulletproof, a GLI company has decades of technology, security, and compliance expertise. Bulletproof's work in the security space has been recognized nationally and globally with Microsoft's global Security Partner of the Year in 2021 and the Microsoft Security Trail-Blazer Award in 2024.

At Bulletproof, our vision is to serve, secure, and empower the world through people and technology; one customer at a time. We believe everyone has the right to feel safe and secure. Our mission is to serve and protect organizations to ensure their success.

What We Have To Offer

• Challenging Work - We love solving highly complex problems. Across our teams and in all roles, every employee is empowered to bring their best ideas forward and to jump in and solve the problems they're passionate about.
• Great People - We are stronger, together, when we are open, honest, and above all, real. Every person is valued here and plays an important role in our shared success.
• Global Impact - As a global team spanning continents, boundaries, and cultures, every day we are inspired by the impact our work has on our colleagues, our customers, our communities, and the world at large.
• Diversity, Equity and Inclusion - We celebrate each other's differences, continuously strive for equality and recognize that inclusion makes us stronger as individuals, a company and a global citizen.

Position Summary
Provide security support an on shift 24X7X365 basis. This involves handling events such as identifying user security issues, extensive troubleshooting, and coordinating resolution or restore using a variety of applications and testing tools. The events can include hardware/software failures as well as security breaches, threats, or network connectivity issues. Regularly provide high-level proactive technical support, including security configurations, security policy modification recommendation, and diagnostics of remote network issues.

Duties

• Perform the detailed and repeatable execution of all operational tasks as documented in SOC processes and subordinate procedures.
• Monitor the SOC main event tools for security events.
• Close or escalate security events as necessary.
• Update all relevant documentation such as shift logs and tickets, procedures.
• Identify impact of incidents on systems, and using available tools determine if data was infiltrated.
• Document and maintain a knowledge base of alarms (false positives and false negatives, blacklists, whitelists) that IDS and IPS encounter.
• Serve as work area experts for security/information assurance policy recommendations.
• Gather intelligence from sources outside the SOC (both internal and external sources) and leverage for operations.
• Escalate incidents to applicable Bulletproof entities and or Bulletproof Customers for remediation.
• Build relationships with other Bulletproof operations units to strengthen customer security posture.
• Ensure security events and incidents are detected and escalated in a timely manner.
• Provide analysis and investigation to determine if alerts or security events warrant incident classification.
• Track incidents through to final resolution.
• Perform incident triage to include determining scope, urgency, and potential impact.
• Drive the Information Fusion Procedure where various data inputs are gathered, analyzed and presented in a meaningful, actionable manner.
• Responsible for long term analysis and investigation into our customer's network activity, and the creation of custom logic to detect unique or previously undetectable attacks on our customer information assets.

Required Education/Credentials/Qualifications

• Bachelor's degree in Computer Science or equivalent experience relevant to network security with relevant industry certifications.
• 2-4 years of related experience in a Network support and or Network operations role; or any combination of education and experience, which would provide an equivalent background.
• Background in networking or security to include intrusion detection/prevention.
• Excellent written, verbal communication and organizational skills.
• Knowledge and experience with PC's, LAN topologies, routers, hubs, switches, and terminal servers.
• Knowledge of security applications such as IDS, IPS, SEM, SIEM and anomaly detection tools.
• Knowledge of trouble ticketing systems or CRM systems.
• Understanding of the operation of test and analysis equipment such as protocol analyzers, LAN/WAN Sniffers, etc.
• Ability to read and interpret network diagrams.
• Ability to read and understand packet captures.
• Basic understanding of the OSI model
• Strong interpersonal and user service skills.
• Knowledge of Unix and Windows operating Systems.
• Experience with processes in functional area (i.e., trouble management, fault management, and incident management).
• Understanding of network management concepts and software, including SNMP
• Security +, SSCP and other technical security certifications (e.g. Information Systems Security Architecture Professional, Information Security Engineering Professional, Certification and Accreditation Professional, or equivalent certifications) (Preferred but not required)

Benefits

• Comprehensive Health, Dental, and Vision Insurance
• Optional Health
• 100% Employer Paid Health and Dental Plan
• Vacation Time
• 401k Plan
• Annual Discretionary Bonus
• Anniversary Reward Bonus
• Educational Assistance Program
• Additional Mental Health Benefits through our Employee Assistance Program

Equal Opportunity Statement
Bulletproof is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Bulletproof is also committed to compliance with all fair employment practices regarding citizenship and immigration status.