C

Critical Start

Provides 24/7 MDR cybersecurity services

Senior Security Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-time$60k - $70k

About the Job

Requirements

  • At least 6 months of Security Operations Center tenure by the first day on shift, or equivalent experience.
  • Security+ certification or equivalent.
  • Ability to triage managed detection and response alerts, analyze events, and recommend or implement actions to mitigate threats.
  • Proficiency with endpoint detection and response, security information and event management, and security platforms including Microsoft Sentinel, Splunk, and CrowdStrike Falcon.
  • Ability to create and review playbooks and automations, communicate with clients about high-severity incidents, and conduct meticulous review and verification.
  • Ability to navigate and explain all aspects of the ZTAP console to Security Analysts and customers.
  • Mid-level competence with the managed detection and response tool suite, including Microsoft Defender for Endpoint, CrowdStrike Falcon, Palo Alto Cortex XDR, VMware Enterprise Endpoint, Trend Micro Vision One, Microsoft Sentinel, Splunk, Devo, and the Microsoft Defender suite (M365 Defender, Outlook, Identity, and Cloud).
  • Ability to apply established protocols promptly, make timely workflow decisions, work effectively under stress and productivity deadlines, and address multiple complex problems simultaneously.
  • Ability to communicate information accurately and clearly.
  • Ability to move equipment or other items weighing up to 20 pounds occasionally.

Responsibilities

  • Participate in shift-based teams performing 24/7 monitoring of customer networks to detect and stop attacks.
  • Analyze events, alerts, and threat intelligence data during investigations of potential attacks against customer networks.
  • Recommend response actions for active attacks.
  • Implement response actions to stop attackers with approval from supervisors or senior analysts.
  • Review post-investigation Security Analyst escalations for response accuracy, protection actions, recommendations, and grammar before they are sent to customers.
  • Create playbooks, knowledge objects, and other automations within the managed detection and response security orchestration, automation, and response platform.
  • Review orchestrations created by Security Analysts for decision accuracy, sound logic, and proper documentation before adding them to the Trusted Behavior Registry.
  • Communicate with clients in writing and verbally, when required, about high- and critical-severity investigations.
  • Serve as a subject matter expert on the platform and explain the ZTAP console to Security Analysts and customers.
  • Verify the correct execution of Lead and Principal console protection actions to provide two-person integrity.
  • Remain stationary and operate a computer for extended periods.

About the Company

Critical Start

Provides 24/7 MDR cybersecurity services

Critical Start provides 24/7 managed detection and response cybersecurity services for mid-sized to large enterprises across healthcare, retail, government, and energy. Its CORR platform powers MDR by combining asset discovery, vulnerability assessments, threat investigation, and incident response, with ZTAP reducing false positives by over 99% via the Zero-Trust Analytics approach. MOBILESOC lets clients interact with security analysts remotely, and in 2023 they added Managed Cyber Risk Reduction (MCRR) aligned with the NIST Cybersecurity Framework for a holistic security view. The company uses a channel-only sales model through resellers and distributors and focuses on continuous monitoring and risk reduction to help organizations detect, respond to, and reduce cyber risk.

Company size
201-500
Company stage
Growth Equity (Venture Capital)
Total funding
$255M
Headquarters
Plano, TX
Founded
2012

Recently Posted Jobs

Explore more opportunities at Critical Start

See more jobs