Security Analyst (Consultant)

Title: Security Analyst (Consultant)
Contract Duration: 12 months
Work Mode: 100% Remote
Rate: 100$/hour on INC.
Location: Canada

Description:
We are seeking a skilled professional to join our team as a consultant. The ideal candidate will play a critical role in ensuring the security and integrity of our systems. This position involves working with SIEM solutions, analyzing security data, and collaborating with various teams to enhance our security posture.

Skills

• Expertise in SIEM solutions (e.g., MS Sentinel) for monitoring, log aggregation, and analysis
• Ability to collect and analyze logs from multiple sources to identify anomalies or potential security incidents
• Proficiency in responding to security incidents, conducting investigations, and documenting findings and actions taken
• Familiarity with industry standards and frameworks (e.g., NIST, ISO 27001, CIS Controls)
• Knowledge of networking protocols, architectures, and security practices to better understand the environments being monitored
• Proficiency in scripting languages (e.g., Python) to automate tasks, enhance SIEM functionality, and facilitate data analysis
• Strong written and verbal communication skills for creating reports, documenting incidents, and conveying technical information to non-technical stakeholders
• Ability to work collaboratively with cross-functional teams, including IT, development, and compliance teams

Responsibilities

• Deploy, configure, and maintain SIEM tools (e.g., MS Sentinel) to aggregate, store, and analyze security data from various sources
• Collect, normalize, and correlate security logs and events for analysis and reporting
• Conduct in-depth analysis of security logs to identify anomalies, suspicious activities, and potential security incidents
• Utilize SIEM tools to configure alerts and reports that notify the security team of potential security breaches or incidents
• Investigate security incidents by analyzing alerts, logs, and related data to determine the nature and severity of the threats
• Incorporate threat detection feeds into the SIEM platform to enhance detection capabilities and ensure timely identification of emerging threats
• Document security incidents, response actions, and lessons learned to improve future incident response efforts
• Continuously improve SIEM configurations, rules, and processes based on lessons learned from incidents and changing threats
• Collaborate with other IT and security teams to develop and refine incident response protocols and security measures
• Assist in post-incident reviews to identify weaknesses in security posture and recommend improvements