Principal Security Operations Analyst

Position Overview:  

Principal Security Operations Analyst is a part of high impact security operations team focused on protecting Diligent personnel, sites and assets worldwide. As part of the Security team, you will help to with the strategy, development, and deployment of a comprehensive physical and logical security operation programs. The position is responsible for oversight and operations on security event monitoring, incident response, user behaviour analysis, threat hunting, in addition to maintaining the confidentiality and integrity of customer, employee, and business information in compliance with organization, industry, and regional policies and standards. 

Key Responsibilities  

• Design and implement security measures to enhance the organization's security posture 

• Oversee the process of scanning for vulnerabilities, assessing risks, and ensuring patches are applied effectively in collaboration with Site Reliability Engineering (SRE) and Engineers. 

• Utilize threat intelligence sources to enhance detection capabilities and proactive threat hunting  

• Act as a point of escalation for issues related to security expertise  

• Create and deliver reports that outline the current state of security operations, highlighting important metrics and insights to senior management and stakeholders. 

• Work closely with teams across IT, Engineering, and Governance, Risk, and Compliance (GRC) to establish and enforce security practices and initiatives. 

• Respond to security alerts generated by tools like Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), CNAP, etc., and take appropriate actions. 

• Take the lead in responding to incidents and ensure documentation and reports meet compliance requirements. 

• Evaluate current and prospective security tools to enhance the organization's overall security readiness. 

• Provide mentorship and guidance to less experienced team members 

Required Experience/Skills  

• 5+ years of experience in security role, with a focus on incident response and threat detection. 

• Working experience in information security, especially on a Computer/Security Incident Response Team (C/SIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC) 

• Working experience with regulatory compliance and information security management frameworks (e.g., ISO 27000, COBIT, NIST 800, etc.) 

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one. 

• Technical expertise in anti-virus solutions, virus outbreak management, and the ability to differentiate virus activity from directed attack patterns. 

• Technical expertise in Intrusion Prevention System (IPS)/Intrusion Detection System (IDS), SIEMs, end point protection systems, etc.  

Preferred Experience/Skills  

• Prior experience in situations requiring one to react quickly, decisively, and deliberately in high-stress, high-impact situations. 

• Must have strong interpersonal skills with the ability to interact with customer’s technical, non-technical easily and effectively, support, and business staff at all levels.