Progressive Leasing · 19 hours ago

Security Analyst (Remote)

United States

Full-time

Remote

Entry Level

2+ years exp

Maximize your interview chances

Financial ServicesInsurance

Insider Connection @Progressive Leasing

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Assist in the support and documentation of EDR, SIEM and network security and monitoring solutions, including operational processes

Support security and technology operations to maintain the security of deployed systems

Support the operation of vulnerability scanning

Analyze and correlate security logs generated by EDR, IDS/IPS systems, firewalls, network flow/packet capture systems, and other security logging sources for any new tools

Monitoring and automation of SIEM and SOAR technology’s alerting via various messaging and ticketing platforms

Provide support for Security Operations and Incident Response

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

EDRSIEMInformation SecurityPythonTCP/IPAWSIncident ResponseGSECSecurity+ITILDocumentation skills

Required

Knowledge of endpoint security technologies; e.g., SentinelOne EDR, IAM, HIPS, FIM, DLP, etc.

Operational experience with security logging, event correlation, SIEM, and security automation using Python and/or other automation methods

Knowledge of TCP/IP, the OSI model, DNS, HTTP, VPN, routing & switching, WAF, and load balancer technologies for virtual and physical networks

Knowledge of threats to include common attack vectors, methodologies and payloads/exploits

Ability to troubleshoot complex networks

Ability to administer and analyze existing security solutions, e.g., firewalls, WAFs, DLP, IDS/IPS, and malware detection, packet capture and analysis tools, etc.

Operational experience with securing virtual and AWS cloud-based environments

Knowledge of secure configuration management, system hardening, and ZTNA practices

Knowledge of Information Security programs aligned with security policies, standards, and procedures

Knowledge of forensic chain of custody practices and Incident Response activities

Working knowledge of ITIL including incident, problem, and change management

AA/AS combined with 2+ years of overall information security and technology operations experience

Information security industry recognized certification(s) highly recommended – GSEC, Security+

Curious, inquisitive, innovative, lifelong learner and self-starter

Strong documentation and communication skills

Clear on responsibilities yet flexible and willing to 'carry water' during times of ambiguity

Able to effectively give, receive, and respond to feedback