Optiv

Who we are looking for:The Client Solutions Advisor (CSA) plays a critical role in serving as a trusted partner to Optiv’s clients. By combining business and security practitioner knowledge, the Client Solutions Advisor designs security solutions using some of the most advanced security services and technologies to achieve highly defensible and scalable security programs to align with the clients’ security initiatives. The Client Solutions Advisor has real-world experience and can design pragmatic security solutions tailored to each client’s unique environment. It is a challenging yet rewarding role that differentiates Optiv from the competition.
<h3>How you'll make an impact:</h3>
<ul>
<li>Effectively work with multiple client personas across the executive branch (CxO), as well as other relevant personas to develop security strategy and define roadmaps to execute on security strategy aligned business goals, budgetary spend, and metrics based on return of investment</li><li>Understand the Optiv security taxonomy and clearly articulate how the various elements of the applicable Optiv solution portfolio meet the specific needs of the client stakeholders</li><li>Design and solution complete security programs to meet client objectives, that includes technology and services</li><li>Interface and partner with the internal Optiv teams particularly service delivery liaisons to align client expectations with the entire Optiv solution portfolio to ensure service delivery excellence and client satisfaction</li><li>Meet quarterly and annual quota objectives working in partnership with the sales team using Optiv sales operating processes by adding value throughout the entire sales motion with such activities as:</li><li>Facilitating new discussions by leveraging peer and industry network contacts</li><li>Telling the Optiv story as the market leading security solutions integration provider</li><li>Performing requirements analysis and qualification of opportunities</li><li>Leading solution development efforts in security technology offerings using the applicable Optiv security taxonomy</li><li>Coordinating demonstrations and security technology evaluations</li><li>Seamlessly transitioning engagements for delivery to the services organization</li><li>Working with Optiv’s Focused Partners to drive strategic initiatives and Go To Market strategies</li><li>Maintain advisory relationships with key stakeholders at clients by providing thought leadership, support, information, and guidance in conjunction with sales partners</li><li>Stay abreast of industry trends and news in order to provide thought leadership, support, analysis and guidance to clients and internal Optiv groups.</li><li>Align with internal security and solutions communities for internal initiatives</li><li>Support marketing to build Optiv brand awareness through speaking at corporate sponsored events, writing industry articles and leveraging social media to properly represent Optiv.</li><li>Actively pursue personal development by maintaining and obtaining technical capabilities, soft skills and security specific knowledge through formal education, certification and other avenues.</li></ul>
<h3>Qualifications for success:</h3>
<ul>
<li>BS/BA or equivalent and applicable work experience</li><li>Progress towards an industry standard cert or relevant academic experience</li><li>Advisory experience across multiple information security domains</li><li>Three or more years of blue team or red team experiences</li><li>Ability to listen and communicate effectively with senior business executives and facilitate high-level business discussions</li><li>Qualify and prescribe implementation services for client need and review Statements of Work (SOWs) against those services</li><li>Thorough understanding of the current threat landscape, vulnerabilities, defensive controls and the ability to advise clients on security technology recommendations, including review of security technology quotes against those recommendations</li><li>Ability to work in a highly adaptable and nimble team environment with responsive communication</li><li>Strong presentation, written, and oral communication skills to clients, including whiteboard sessions and other presentation mechanisms</li><li>Highly motivated self-starter that does not require day-to-day management. </li><li>Ability to work remotely with distributed teams in a decentralized environment</li><li>Work with automated methods and tools to ensure client requests are fielded</li><li>Valid driver’s license or other valid government accepted identification</li><li>Ability to travel within assigned region or assigned accounts, as well as internationally as needed</li><li>Perform additional duties as directed or needed</li><li>#LI-MB1</li></ul>If you are seeking a culture that supports growth, fosters success, and moves the industry forward, find your place at Optiv! As a market-leading provider of cyber security solutions, Optiv has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on trust, serving more than 12,000 clients of varying sizes and industries, including commercial, government, and education. We have the proven expertise to plan, build, and run successful security programs across Risk Management, Cyber Digital Transformation, Threat Management, Security Operations - Managed Services, and Identity and Data Management.With Optiv you can expect:• A company committed to championing Diversity, Equality, and Inclusion through our Affinity groups including, Black Employee Network, Disabled Employee Network, Latino Employee Network, Optiv Pride (LGBTQIA+), Veterans Support Network, and Women's Network.• Work/life balance. • Professional training resources• Creative problem-solving and the ability to tackle unique, complex projects• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.• The ability and technology necessary to productively work remotely/from home (where applicable)Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, status as an individual with a disability, veteran status, or any other basis protected by federal, state, or local law. Optiv respects your privacy.  By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities.  For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.

Philadelphia

Client Solutions Advisor - Cybersecurity Architect - Philly Metro

Triskele Labs

The Level 1 SOC Analyst is responsible for ongoing monitoring and triaging of Triskele Labs Security Operations Centre (SOC) clients on a 24x7x365 basis. This includes monitoring of SIEM technologies, Vulnerability Management and Threat Intelligence Management to identify and report on potential threats within a client network. In addition to raising threats as tickets for clients, you will also be responsible for assisting with monthly reporting, procedure and workflow development. The Level 1 SOC Analyst is the frontline of the SOC and responsible for catching the bad guys before they can compromise a client network. A day in the life of a Level 1 SOC Analyst includes:<ul> <li>Monitor client computer networks for security issues on a 24x7x365 Rotating Roster.</li> <li>Investigate security threats, security breaches and other cyber security incidents.</li> <li>Operate software to protect systems and information infrastructure including SIEM, SOAR and Vulnerability Management platforms</li> <li>Operate the centralised Service Desk function and act as a fist point of contact via the 1300 number.</li> <li>Raise Critical and High alerts with clients via SMS and phone following Escalation procedures.</li> <li>In accordance with Change Management Procedures, install security measures to mitigate confirmed security threats.</li> <li>Document confirmed security threats and breaches and assess where possible the damage they cause.</li> <li>Prepares monthly service management and other service reports as required</li> <li>Regularly review and maintain all client software configurations used to provide the contracted DefenceShield services and where required update these within the relevant Document Management system that records for future reference each configuration parameter and value that has been</li> <li>Verify (through testing) that any software tools, used as part of performing your role within a client environment, works as intended and produces the results as expected.</li> <li>Stay current on IT security trends and news.</li> <li>Assist to develop company-wide best practices for IT security.</li> <li>Research security enhancements and make recommendations to management.</li> <li>Stay up to date on information security standards.</li> </ul>Triskele Labs are an equal opportunity employer and this position is open to all genders, nationalities and races. You will be required to participate in the 24x7x365 roster, working in our SOC in South Melbourne.RequirementsAs you will be the front line of the SOC, you will be required to have excellent soft skills and the ability to work collaboratively with clients. You will hold an Advanced Certification in Cybersecurity and have exceptional knowledge of cybersecurity practices, especially Security Operations. You will continually be learning cybersecurity and on the forefront of threats and what is happening in the industry. Importantly, you will be required to:<ul> <li>Maintain an awareness of all work that has been assigned.</li> <li>Maintain an awareness of the delivery expectations in relation to time and cost of all assigned work.</li> <li>Strictly adhere to Company Standards, Guidelines, Procedures, Processes and Policies.</li> <li>Use approved Triskele Labs Company templates and style guides for deliverables.</li> <li>Bring to the Security Operations Manager’s attention as soon as it becomes known, if there is a problem with the way in which a work assignment / deliverable is expected to be met and suggest an alternative solution.</li> <li>Bring to the Security Operations Manager's attention, as soon as it becomes known, if the expected completion date of a work assignment/deliverable cannot be met.</li> <li>Bring to the Security Operations Manager's attention any issues impacting personal effectiveness.</li> <li>Ensure documentation is held in the appropriate Triskele Labs Document Management System.</li> <li>Record time correctly in the Time Recording System on a daily basis.</li> <li>Hold a shift hand over meeting with the outgoing Security Analyst Level 1 at the start of each shift and update all relevant information into the Shift hand over document at the end of each shift.</li> <li>Attend and participate in team meetings as requested by the Security Operations Manager.</li> <li>Other activities as directed by Security Operations Manager.</li> </ul>It is important to note you will be required to complete your CompTIA CySA+ certification within your first 3 months and your Security Blue Team Blue Team Level 1 Certification (Standard) within your first 4 months. In addition, you will be required to conduct at least one (1) Blue Team Online Lab per month.BenefitsTriskele Labs have worked since October 2014 to build an inclusive team culture. We believe in information sharing and ensuring all team members feel part of the team, including those on shift. We look after our team not just through salaries, but also ongoing training. Outside of salaries paid, Triskele Labs provide the following for all Level 1 SOC Analysts:<ul> <li>Blue Team Labs Online Account</li> <li>CySA+ Training and Exam</li> <li>Security Blue Team Blue Team Level 1 Certification (Standard) Course and Exam</li> <li>5 weeks annual leave per year</li> <li>Day of Birthday Leave</li> <li>Day of Doona Day Leave</li> <li>Access to our Employee Assistance Program</li> <li>Access to our Perkbox benefits and rewards platform</li> <li>Social Activities</li> </ul>In addition, there will be opportunities for appropriately skilled analysts to move through the ranks as our team continues to grow. We believe in promoting from within.

Melbourne

Level 1 Security Analyst

Deloitte

<h3>Company Description</h3>Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax and related services. Our global network of member firms and related entities in more than 150 countries and territories (collectively, the “Deloitte organization”) serves four out of five Fortune Global 500® companies. Learn how Deloitte’s approximately 312,000 people make an impact that matters at www.deloitte.com. Join us to our Cyber Intelligence Center as a Cyber Risk – Delivery Consultant!   Want to help us create a secure cyber environment? Who we are:  Risk Advisory is home to our team of Cybersecurity specialists, an environment created with an innovation culture, made up of more than 1,700 professionals that help organisations to make intelligent decisions, in order to prevent and manage business and operational risks, along with those existing in technological, financial, and non-financial processes.  Click here to read more about our Risk Advisory practice. Are you up for it?  The Cyber Risk team wants to meet you!  <h3>Job Description</h3>What impact will you make? This new adventure combines innovation (i.e., Cyber security for Smart cars), a real international environment (working from South Africa together with our Deloitte EMEA Cybersphere Center (ECC), based in Madrid, Spain, for the whole EMEA region) and a career path, helping you to evolve and grow as a cyber security professional whilst keep learning and training in Cyber. Our Cyber family keeps growing and expanding our limits. We will provide managed cyber security services to our EMEA clients from our Cyber Intelligence Center based in Johannesburg, South Africa.  <h3>Qualifications</h3>How you will make an Impact Minimum Qualifications <ul><li>Tertiary qualification in a technical field (such as electronics, computer science, information technology or related fields) </li><li>Extended exposure to Cyber concepts (more than 2 years), performing administration/management activities of the mentioned SIEM solutions (Splunk and Microsoft Azure Sentinel) and performing investigations of triggered security incidents, reporting those based on findings and provide the required recommendations to mitigate them. </li><li>Certifications in CyberSecurity and IT space (i.e., compTIA+, Blue Team Level 1, CySA+, OSCP, CHFI, CREST,…). </li><li>Certifications/specialised training provided by Cybersecurity vendors for their Cybersecurity products (i.e., Splunk, Microsoft Azure Sentinel, etc.).</li></ul>Minimum experience: <ul><li>2 years as SIEM Engineer and recent previous experience in Cybersecurity, Blue teaming and SIEM Engineering teaming</li><li>2 years as Level 1 SOC Analyst or 1 year as Level 2 SOC Analyst. </li></ul><ul><li>Communication skills: English (Full professional capabilities). </li><li>Advanced knowledge on Cybersecurity. </li><li>Advanced knowledge on attack techniques and cyber threats. </li></ul><ul><li>Experience in conducting advanced incident investigations and security alerts. </li><li>Advanced knowledge on Operative Systems and Network. </li><li>Experience in working with ticketing systems. </li><li>Experience in identifying and defining cyber security logic (i.e., use cases) to enhance detection capabilities. </li><li>Experience in reporting and threat analysis. </li></ul><ul><li>Microsoft Azure Sentinel SIEM solution: </li></ul><ul><li>Advanced knowledge in performing configuration and administration activities. </li><li>Previous experience in defining and developing correlation rules in Azure Sentinel. </li></ul><ul><li>Splunk SIEM solution: </li></ul><ul><li>Knowledge in performing configuration and administration activities. </li></ul><ul><li>Previous experience in defining and developing correlation rules in Azure Sentinel. </li></ul><ul><li>Knowledge in SOAR solution and how to use it to enhance the regular and daily SOC and monitoring activities. </li></ul>What you offer <ul><li>You are passionate about Cybersecurity!  </li><li>Open to on-call shifts. </li></ul><h3>Additional Information</h3>* Please note that this job advertisement provides a summary of the capabilities required and all candidates shortlisted will receive a full list of capabilities. At Deloitte, we want everyone to feel they can be themselves and to thrive at work—in every country, in everything we do, every day. We aim to create a workplace where everyone is treated fairly and with respect, including reasonable accommodation for persons with disabilities. We seek to create and leverage our diverse workforce to build an inclusive environment across the African continent.

Midrand

Risk Advisory - Cyber Risk - SOC/SIEM Engineer - Senior Consultant

Coupang

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.
We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurial surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.
Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.
Role Overview:
Blue Team aims to detect and respond to cyber threats to minimize the damage. To achieve this goal, we have a Security Operations Center (SOC) to monitor and detect threats, a DART (Detection And Response Team) team to respond to incidents, a Detection Engineering team to improve cyber threat detection capabilities, and a DevSecOps team in charge of development and security equipment operation.
Blue Team DART (Detection And Response Team) actively utilizes cyberthreat intelligence to detect all known threats, operates SOC to create detection rules based on use cases, performs security monitoring using SIEM and SOAR, and also performs security tasks from a defense standpoint through analyzing and responding to security incidents. 
From a threat hunting perspective, a DART Security Analyst will determine if there is a threat by looking at various logs and traces as well as logs on SIEM and take necessary actions.
What You Will Do:
<ul>
<li>Detect security anomaly, analyze and respond to incidents and intrusion attempts </li>
<li>Perform static and dynamic analysis to come up with TTP through malware analysis  </li>
<li>Develop and manage detection policies through analyzing system and network security events  </li>
<li>Identify potential security threats and take measures after assessing the residual risks </li>
<li>Develop and improve detection policies for internal threats and respond</li>
<li>Support security monitoring for subsidiaries and overseas businesses, detect and respond to intrusion attempts  </li>
<li>Provide information security related technical support to relevant departments  </li>
<li>Conduct security vulnerability trend analysis and impact assessment  </li>
</ul>
Basic Qualifications:
<ul>
<li>More than 7 years of practical experience in information security and more than 5 years of incident response experience  </li>
<li>Develop anomaly detection policies and rules using SIEM and Cyber Threat Intelligence (CTI) solutions  </li>
<li>Experience in using EDR solutions and ability to use forensic tools (Carbon Black, CrowdStrike, EnCase-EDR, FTK, Volatility memory forensic, etc.)  </li>
<li>Experience in host-based security investigations (Windows, Linux, network/security appliance)  </li>
<li>Able to operate SIEM and Cyber Threat Intelligence (CTI) solutions and develop use cases/rules  </li>
<li>Knowledge of application security such as web applications and mobile app traffic  </li>
<li>Bachelor's degree or equivalent work experience  </li>
</ul>
Preferred Qualifications:
<ul>
<li>Expertise on E-commerce related security threats </li>
<li>Knowledge of cloud platforms (e.g. AWS, Azure, GCP) </li>
<li>Knowledge of container environments (e.g. Kubernetes, Docker) </li>
<li>Experience using Splunk </li>
<li>Experience in automation and script development (Linux shell, Python, Perl, Powershell) </li>
<li>Knowledge of or experience in implementing OWASP, Diamond model, MITRE ATTACK </li>
</ul>
Coupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to actual or perceived race (including traits historically associated with race, including but not limited to hair texture and protective hair styles), color, religion, religious creed (including religious dress and grooming practices), sex or gender (including pregnancy, childbirth, breastfeeding, and medical conditions related to pregnancy, childbirth or breastfeeding), gender identity, gender expression, sexual orientation, ,ancestry, national origin (including language use restrictions), age (40 and over), physical or mental disability, medical condition, genetic information, HIV/AIDS or Hepatitis C status, family status (including but not limited to marital or domestic partnership status), military or veteran status, use of a trained dog guide or service animal, political activities or affiliations, ancestry, citizenship, family and medical leave status, status as a victim of any violent crime, or any other characteristic or class protected by the laws or regulations in the locations where we operate. Coupang is also committed to providing a safe work environment for its employees and its consumers.  As a condition of employment, Coupang requires employees to be fully vaccinated against Covid-19, subject to legally required accommodations.  If you need assistance and/or a reasonable accommodation in the application of recruiting process due to a disability, please contact us at usrecruiting@coupang.com.

Seattle

Staff Cyber Security Response

Senior Cyber Security Engineer

Apply to Blue Team Cyber Security Jobs in companies remotely and near you. New Blue Team Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Client Solutions Advisor - Cybersecurity Architect - Philly Metro at Optiv	Remote Full Time Red Team Blue Team
Level 1 Security Analyst at Triskele Labs	Full Time Blue Team Soc Analyst Comptia Analyst
Risk Advisory - Cyber Risk - SOC/SIEM Engineer - Senior Consultant at Deloitte	Full Time Blue Team Soc Analyst Comptia Consultant
Staff Cyber Security Response at Coupang	Full Time Blue Team Forensic Analyst Incident Response
Senior Cyber Security Engineer at Coupang	Full Time Blue Team Forensic Analyst Incident Response

Blue Team Cyber Security Jobs

0 Blue Team Cyber Security Jobs. Page 1 of 1

5 closed blue team cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Blue Team Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Blue Team Cyber Security Jobs

0 Blue Team Cyber Security Jobs. Page 1 of 1

5 closed blue team cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Blue Team Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter