Security Analyst (East Coast)- Mid-Atlantic region

Description

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

GuidePoint Security is seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond. The ideal candidate will have a willingness to continuously update knowledge and skills and is keen on collaborating as a team player and be willing to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors.

Technical Skills Required

• Experience with SIEM tools for investigations and ability to create, run and tune SPL queries
• Understanding of Indicators of Compromise (IOCs)
• Deep understanding of TCP/IP, DNS, DHCP, and similar protocols.
• Ability to analyze network traffic and identify anomalies.
• Knowledge of endpoint detection and response (EDR) tools
• Experience with anti-virus and malware analysis
• Familiarity with MITRE ATT&CK and other similar incident response frameworks
• Hands-on experience in triage, containment, and threat eradication.
• The ability to analyze and monitor logs and formulate potential attack theories using analytical skills for scenarios:
• Interpret logs from systems such as servers, firewalls, and applications.
• Identify patterns and detect threats using log correlation across cybersecurity tools
• Basic proficiency in scripting languages (Python, Bash, PowerShell),
• Use regular expressions (regex) for data parsing.
• Understand the importance of vulnerability management and scanning
• Knowledge of forensic tools preferred.
• Familiarity with cloud security practices and tools (AWS GuardDuty, Microsoft Defender for Cloud).
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcome

Soft Skills

• Strong critical thinking and problem-solving skillset
• Ability to analyze complex situations and make informed decisions under pressure.
• Strong verbal and written communication skills for documenting incidents and collaborating with teams.
• Ability to convey technical concepts to non-technical stakeholders.
• Keen observational skills to spot anomalies and patterns.
• Willingness to collaborate with other analysts, IT teams, and external stakeholders.
• Calm and flexible in fast-paced, high-pressure environments.
• Understanding of threat actor tactics, techniques, and procedures (TTPs).
• Familiarity and knowledge of emerging threats and vulnerabilities and have the means to obtain relevant information for threat investigations.
• Previous experience in a SOC or similar role preferred.
• Experience with managing real-world incidents.

Preferred Certifications

• CompTIA Security+
• GIAC Certified Incident Handler (GCIH)
• Certified Information Systems Security Professional (CISSP)
• Certified Ethical Hacker (CEH)