Cyber Security Analyst I

<p><span data-contrast="auto">CyberSheath Services International LLC is a rapidly growing Security and IT Managed Services Provider primarily focused on providing Cybersecurity services to the Defense Industrial Base (DIB). We are excited to be expanding our staff due to our growth and are looking to add a Cyber Security Analyst I to our Security Operations team! </span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">CyberSheath integrates compliance and threat mitigation efforts and eliminates redundant security practices that don’t improve and, in fact, may weaken an organization’s security posture. Our professionals tell clients where to stop spending, where to invest, and how to take what they are already doing and integrate it in a way that delivers improved security.  </span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">Job Overview </span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">The Cyber Security Analyst I will support proactive monitoring of clients’ environments to detect, analyze, track, and mitigate external threats utilizing a multi-tenant security information and event management system (SIEM) and other tools used to provide managed security services. The successful candidate is well versed in numerous security technologies, understands the motivations and capabilities of Advanced Persistent Threat actors, can communicate risks, and make recommendations associated with specific security threats.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">Essential Responsibilities (include but are not limited to): </span><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Analyze, investigate, document and report on security alerts and/or potential security incidents identified in customer environments </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Process security investigation cases in a thorough, yet timely manner</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Serve as an incident coordinator for security events that require urgent response, containment, and remediation </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Generate meticulous investigative notes for all security alerts and incidents</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Provide continuous feedback on security process improvements and customer satisfaction</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="6" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Stay up-to-date on security training, certification, and emerging threats</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Make appropriate escalations on security investigations when warranted</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Ensure shift-change documentation is completed and communicated effectively</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Follow all available SOPs and escalation communication matrices</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="4" data-aria-level="1"><span data-contrast="auto">Provide customers with meaningful and constructive security consultation during external communications.</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <p><span data-contrast="auto">Required Education, Experience, & Skills </span><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">0-3 years' experience working in a Security Operations Center (SOC) environment  </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="13" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Basic understanding of query languages </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="14" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">General knowledge of programming language operations</span><span data-ccp-props="{" 134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":720,"335559737":0,"335559738":0,"335559739":160,"335559740":278,"335559991":360}"=""> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="15" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">System Networking experience or education </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Working knowledge/experience with Office 365 </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="18" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Possess strong problem-solving skills</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="19" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Excellent verbal and written communication skills</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="20" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Demonstrated ability to work in a team environment and independently </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="21" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Must be a U.S. Citizen and reside within the United States or its Territories </span><span data-ccp-props="{}"> </span></li> </ul> <p><span data-contrast="auto">Preferred Education, Experience, & Skills </span><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="22" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">B.S. - Cybersecurity or equivalent </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="22" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Prior experience with Sumo Logic, Defender, Google Chronicle, and/or Azure Sentinel is a strong plus. </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="23" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Industry Security Certifications (Security+, CySA+, GSEC) </span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="23" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Experience or working knowledge of industry standard SOAR/SIEM solutions</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="25" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Great organization skills to balance work priorities</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Advanced analytical and problem-solving skills </span><span data-ccp-props="{}"> </span></li> </ul> <p><span data-contrast="auto">Work Environment </span><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">CyberSheath is a fully remote organization, and this will be a work-from-home position  </span><span data-ccp-props="{}"> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">The schedule for this opportunity is: </span> <ul> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Week One: Friday-Sunday 8:00 AM - 8:00 PM local time</span></li> <li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Week Two: Friday-Monday 8:00 AM - 8:00 PM local time </span><span data-ccp-props="{}"> </span></li> </ul> </li> </ul> <p><em><span data-contrast="auto">CyberSheath is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, national origin, age, protected veteran status, among other things, or status as a qualified individual with a disability. </span></em><span data-ccp-props="{}"> </span></p><div class="content-pay-transparency"><div class="pay-input"><div class="title">Budgeted Pay Range</div><div class="pay-range"><span>$65,000</span><span class="divider">—</span><span>$75,000 USD</span></div></div></div>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...