The IT Security Analyst II will be an experienced security practitioner responsible for the operations and administration of enterprise security solutions and processes. As a Tier 2 Security Engineer you will play a critical role in an integrated enterprise-wide security team that includes 24x7 SOC operations. In this role you will serve as the Subject Matter Expert (SME) for SIEM configuration and vulnerability management systems ensuring the seamless operation and continuous enhancement of these critical security functions. You will be responsible for maintaining and fine-tuning SIEM data connections log collectors and alerts while also driving comprehensive vulnerability management through targeted scans and detailed reporting.
Supervisory Responsibilities:
This position has no direct supervisory responsibilities.
Essential Duties and Responsibilities:
- Serve as the SME for SIEM configuration ensuring optimal data connections and log collection from various sources
- Fine-tune alerts and dashboards to reduce noise and improve the SOC's response effectiveness
- Continuously improve SIEM use cases and correlation rules to enhance detection capabilities
- Perform vulnerability scans analyze results and collaborate with IT teams to prioritize remediation efforts
- Fine-tune scan settings to optimize performance and coverage without impacting network or system performance
- Generate detailed reports that highlight vulnerabilities and track remediation progress
- Continuously improve the security posture of client-facing applications by identifying risks and implementing appropriate mitigation strategies
- Conduct periodic security scanning and internal security testing to identify and remediate potential security breaches
- Conduct advanced adversary analysis SIEM analysis and deep dives using blue-team and red-team pen-test tools to identify and address security vulnerabilities
- Collaborate with SOC analysts to analyze and respond to threats in real-time
- Develop and document incident response run-books with detailed methods and procedures for the SOC team
- Participate in incident response activities providing expertise and guidance during security incidents
- Generate detailed reports for business managers and system owners to evaluate the effectiveness of security policies and recommend improvements
- Provide regular updates to senior management on the status of security systems vulnerabilities and incident response activities
Skills/Abilities:
- Ability to analyze complex security issues and recommend effective solutions
- Precision in configuring and maintaining security systems
- Strong ability to troubleshoot and resolve security issues
- Work effectively with cross-functional teams to improve security posture
- Ability to adjust to rapidly changing security landscapes and emerging threats
- Expected to work under own initiative prioritize own work and meet agreed timescales and deliverables
Education and Experience:
- 3+ years of experience in a security engineering or related role
- Hands-on experience with SIEM tools (e.g. Splunk Rapid 7) and vulnerability management platforms (e.g. Qualys Rapid 7) preferred
- Strong knowledge of security principles techniques and technologies
- Experience in conducting adversary analysis and using blue-team/red-team tools
- Excellent communication skills with the ability to explain complex technical concepts to non-technical stakeholders
Certificates/Licenses/Registration
- Relevant certifications (e.g. CISSP CEH GCIH) are preferred
Physical Requirements:
- Work is performed indoors with potential for exposure to safety and health hazards related to office work. Could periodically travel to other office and operational sites. The noise level in the work environment is usually moderate.
- Prolonged periods of sitting at a desk and working on a computer.
SelectQuote Core Values:
Service: We create positive customer experiences.
Entrepreneurship: We create innovate & take risks.
Leadership: We build & invest in high-performing teams. Empowerment: We embrace a changing environment.
Courage: We challenge the status quo & drive continuous improvement.
Teamwork: We help support & celebrate each other.
Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this job. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required.