About The Opportunity
Netrix Global is looking for a Threat Analyst for the Managed Services - Security department, for our Netrix’s Rapid Advanced Detection And Response (RADAR) Services.
The Threat Analyst will be responsible for helping the RADAR team in working with our clients and helping to identify threats, investigate security events, and respond to incidents. RADAR provides more to our clients than the typical run-of-the-mill security monitoring service. As a Netrix Threat Analysts you will bring more to the table than your typical SOC log review analysts. This role will report to the Threat Operations Manager.
How You Will Make An Impact
- Strong interpersonal, organizational, communication, and writing skills
-
Being a Netrix Threat Analyst means engaging with clients; meeting their objectives and communicating the details associated with potential threats is critical to success.
-
You must be the expert in the room, and able to communicate and support your recommendations.
-
Capability to investigate technical elements they might never have seen before
-
Independent investigative skills
What You Will Bring To The Table
- 1 to 3 years experience preferred working in IT such as help desk, desktop support
Working knowledge of the TCP/IP suite of protocols. - Threat Detection & Monitoring: Use Elastic SIEM to monitor security events and logs across the
network, endpoints, and cloud environments. - Identify and analyze security threats, vulnerabilities, and anomalies in real-time, including
possible malicious activity, intrusions, and policy violations. - Investigate security incidents, including malware infections, phishing attacks, and unauthorized
access attempts. - Incident Analysis & Response: Perform initial triage and classification of security incidents.
Support the incident response process by gathering relevant data, escalating threats when
necessary, and assisting in the remediation and containment of incidents. - Maintain a detailed incident report with findings, actions taken, and recommendations for
future prevention. - Log Analysis & Correlation: Perform log analysis and correlate security events from multiple
sources (e.g., firewalls, IDS/IPS, web servers) to identify potential threats or breaches.
Create and tune detection rules and alerts in Elastic SIEM to improve accuracy and reduce false
positives. - Threat Intelligence Integration: Collaborate with threat intelligence teams to integrate external
threat data (e.g., Indicators of Compromise - IOCs, TTPs) into Elastic SIEM for enhanced
detection capabilities. - Documentation & Reporting: Document incidents, findings, and lessons learned to improve
future detection capabilities and response protocols. - Assist in producing periodic security reports and metrics to communicate the effectiveness of
threat detection efforts to management. - Collaboration & Support: Work closely with other teams (e.g., IT, Security Operations, SOC) to
ensure a coordinated approach to threat detection and response. - Contribute to security awareness by sharing insights and recommendations for improving
overall security posture. - Conceptual knowledge of network and systems architecture o Network segmentation (e.g.,
DMZ) o Intrusion Detection Systems o Web application architecture o Active Directory
Solid understanding of how major application layer protocols function (e.g., HTTP, SMTP, DNS). - Basic knowledge of categories of malware and how they function (e.g., rootkits, trojans, adware)
Conceptual understanding of vulnerabilities and attack vectors such as: o SQL Injection o Brute
force attack o Port scans o Malware infection vectors o Phishing attacks o Drive by/Redirection
attacks. - Optional Skills
Certifications are always a plus, but not required: • CISSP • GCIH • GCIA • GSEC
Programming/Scripting (e.g., Perl, Python, Ruby) Network traffic analysis skills Comfortable in
multiple operating systems (Windows, Linux, Unix, OSX)
About Us
At Netrix Global our values are the philosophies and principles that we live by. They support our vision, help us achieve our goals and commit us to a common purpose.
We Own Outcomes, Win Together, Make An Impact, Enjoy The Journey, and Respect All!
Netrix Global is a mission-driven organization with the goal of providing the people, processes, and technology needed to run and scale modern, data-driven businesses that are always on and always secure. Our breadth of capabilities allows us to provide holistic offerings that solve even today’s most complex business challenges, delivering to you an integrated, optimized, and future-proof solution.
We work with clients of all sizes and specialize in solutions for healthcare, manufacturing, government, education, financial services, and legal industries. Netrix is consistently ranked in the CRN VAR500, detailing the country’s top system integrators.
At Netrix, we’re driven to solve business problems with innovative technology solutions. We focus on end-users and are committed to client satisfaction.
What You Can Expect From Us
We offer a competitive compensation package, comprehensive group benefits to meet the needs of you and your family, flexibility, and time off when you need it, and a casual work environment. The role can be remote/home office, with some travel required.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. As part of this commitment, we will ensure that persons with disabilities are provided reasonable accommodations. If you need reasonable accommodations, please let us know by contacting NetrixHR@Netrixglobal.
To learn more about Netrix Global please go to www.netrixglobal.com