Cyber Security Analyst
Pilsbury Law

Job Info

---

Nashville, Tennessee

Job Description

The Cybersecurity Analyst (CSA) is critical role within the firm and is responsible for assisting with the day-to-day operations of securing the firm's various information systems and data. Reporting to the Enterprise Security Manager, the CSA is an essential role tasked with investigating security related events and working with teams to locate and remediate the vulnerabilities. The CSA effectively correlates and analyzes security events within the context of firm's unique environment to proactively detect threats and mitigate attacks before they occur.

The CSA works closely with the various teams in the Information Technology department to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. The CSA will play a key role in helping shape and develop security protocols for the entire firm and its digital and cloud ecosystem.

Responsibilities include providing cybersecurity monitoring and incident response services supporting the mission to protect firm's information systems and assets; identifying and implementing additional SIEM use cases; documenting work within a security operation ticketing system; information gathering, port and vulnerability scanning and analysis according to policy; developing of CSOC security policies, processes, and procedure. In addition this role will identify data sources and analytics for inclusion into SIEM; act as a point of escalation for Tier 1 CSOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques; actively participate in researching trends and current countermeasures for cybersecurity vulnerabilities, exploits, and other malicious activity; act as a liaison between the CSOC and Incident Response Team. The Cyber Security Analyst will assist in the creation and maintenance of documentation for CSOC procedure and processes; contribute to the development and improvement of security monitoring and incident response processes and solutions as required to support firm's Cybersecurity program; explore opportunities for CSOC maturity improvement and automation capabilities; is responsible for working in a 24x7 Cybersecurity Operation Center environment; and will drive the outcomes of lessons learned to further the security posture of the business.

Candidates should have a college degree or equivalent industry training and certifications; and 4 to 5 years of relevant work experience . The role requires direct experience with any SIEM or log aggregation system; knowledge of security monitoring technologies and cored security principles; experience with digital forensics, penetration testing, threat intelligence, malware analysis or reverse engineering; and the ability to review captured network traffic, and compare against the contents of a security alert to verify the nature of the detection. Candidates should also have experience analyzing Firewall, IDS, IPS, DNS, DHCP, Web Proxy, Anti-Virus and SMTP data for security-related concerns and events; scripting skills in any common language (Python, Perl, Bash or Powershell); the ability to suggest technical solutions to complicated problems; and experience and familiarity with IT management products and services.

Pillsbury Winthrop Shaw Pittman LLP is an Equal Opportunity Employer.

If you require an accommodation in order to apply for a position, please contact us at PillsburyWorkday@pillsburylaw.com .

This job has expired.