Security Analyst (Hybrid in Philadelphia, PA) - Mid-Atlantic region

GuidePoint Security is seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond.  The ideal candidate will have a willingness to continuously update knowledge and skills and is keen on collaborating as a team player and be willing to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors.

NOTE: This is a hybrid position so we are looking for candidates in/near Philadelphia, PA open to working onsite 1 week per month.

Technical Skills Required:

• Familiarity with CrowdStrike for investigations, ability to create and run CrowdStrike queries
• Familiarity with creating Dashboards in Falcon Console
• Familiarity with other parts of the Crowdstrike Suite including Falcon Complete MDR console
• Advise new users on best practices for investigations leveraging NG-SIEM
• Understanding of Indicators of Compromise (IOCs)
• Deep understanding of TCP/IP, DNS, DHCP, and similar protocols.
• Ability to analyze network traffic and identify anomalies.
• Knowledge of endpoint detection and response (EDR) tools
• Experience with anti-virus and malware analysis
• Familiarity with MITRE ATT&CK and other similar incident response frameworks
• Hands-on experience in triage, containment, and threat eradication.
• The ability to analyze and monitor logs and formulate potential attack theories using analytical skills for scenarios
• Interpret logs from systems such as servers, firewalls, and applications.
• Identify patterns and detect threats using log correlation across cybersecurity tools
• Basic proficiency in scripting languages (Python, Bash, PowerShell),
• Use regular expressions (regex) for data parsing.
• Understand the importance of vulnerability management and scanning
• Familiarity with cloud security practices and tools (AWS GuardDuty, Microsoft Defender for Cloud).

Must be able to exhibit the following soft skills as an analyst:

• Strong critical thinking and problem-solving skillset
• Ability to analyze complex situations and make informed decisions under pressure.
• Strong verbal and written communication skills for documenting incidents and collaborating with teams.
• Ability to convey technical concepts to non-technical stakeholders.
• Keen observational skills to spot anomalies and patterns.
• Willingness to collaborate with other analysts, IT teams, and external stakeholders.
• Calm and flexible in fast-paced, high-pressure environments.
• Understanding of threat actor tactics, techniques, and procedures (TTPs).
• Familiarity and knowledge of emerging threats and vulnerabilities and have the means to obtain relevant information for threat investigations.
• Previous experience in a SOC or similar role required.
• Experience with managing real-world incidents.
  
  

Preferred certifications:

• CrowdStrike Certified SIEM Analyst (CCSA)
• CrowdStrike Certified Falcon Responder (CCFR)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)