Security Analyst

About the Role

This role supports Our Client's Security Office by providing real‑time monitoring and response to cyber threats. Working within a dynamic Security Operations Center, the analyst collaborates with IT and security teams to protect critical systems and data. The position offers a hybrid environment, allowing up to three days per week on‑site in Dover, Delaware. By detecting, analyzing, and mitigating incidents, the analyst directly contributes to the organization’s overall security posture.

Key Responsibilities

• Continuously monitor network traffic, system logs, and security alerts to identify suspicious activity.
• Perform rapid incident detection, categorization, containment, and remediation for malware, data breaches, and insider threats.
• Triage alerts from SIEM and endpoint tools, assess severity, and prioritize response actions.
• Conduct proactive threat hunting using threat intelligence, SIEM queries, and EDR data.
• Analyze logs from firewalls, IDS/IPS, antivirus, and endpoints to uncover patterns and anomalies.
• Manage and fine‑tune security technologies such as SIEM platforms, IDS/IPS, firewalls, PKI, and endpoint protection solutions.
• Document incidents, maintain accurate records, and ensure compliance with industry regulations and internal policies.
• Collaborate with cross‑functional IT and security teams to investigate root causes and implement preventive measures.

Required Skills & Experience

• 2+ years of hands‑on experience in a Security Operations Center or similar cyber‑security role.
• Strong understanding of operating systems (Windows, Linux), networking protocols (TCP/IP, DNS, HTTP), and core security concepts.
• Proficiency with security monitoring tools such as SIEM, IDS/IPS, firewalls, antivirus, and endpoint detection & response solutions.
• Experience writing automation scripts in Python or PowerShell to streamline incident response tasks.
• Basic knowledge of computer forensics techniques for evidence collection and analysis.
• Demonstrated ability to analyze large volumes of log data to identify threats and anomalies.
• Effective incident response experience, including containment, eradication, and post‑incident reporting.
• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field (or equivalent practical experience).

Tools & Technologies

• Security Information and Event Management (SIEM) platforms for log aggregation and correlation.
• Intrusion Detection/Prevention Systems (IDS/IPS) for network threat detection.
• Firewalls and VPN technologies for perimeter defense.
• Antivirus and Endpoint Detection & Response (EDR) tools for host‑level protection.
• Public Key Infrastructure (PKI) management for certificate handling.
• Python and PowerShell scripting for automation and custom detection rules.
• Threat intelligence feeds and platforms for proactive hunting.

Work Schedule & Duration

• Contract period: October 5, 2026 – June 30, 2027 (approximately 9 months).
• Hybrid work model: up to three days per week on‑site at the Dover location, with the remainder remote.

Interview Process

The interview process typically includes an initial screening call followed by a technical interview conducted via Microsoft Teams. Candidates may be asked to discuss past incident response experiences, demonstrate scripting abilities, and solve scenario‑based security challenges.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States