MTA - Security Event Analyst

Position Summary:

As a Cybersecurity Event Analyst, you will play an integral role in our Cyber Investigation & Response Team, where your keen analytical skills and eagerness to learn will be your greatest assets. This position offers a unique opportunity to gain hands-on experience in the fast-paced world of cybersecurity while working alongside seasoned professionals.

As the first line of defence, you will be responsible for monitoring security events and alerts, providing initial analysis, and determining appropriate actions to safeguard our systems. Your role will involve utilizingstate-of-the-art tools and technologies to identify and assess potential threats. By conducting thorough investigations and triaging incidents, you will help ensure that our organization's response is both timely and effective.

This position is designed for individuals who are passionate about cybersecurity and eager to develop their skills. We value curiosity and a proactive approach, encouraging you to ask questions and seek mentorship from our experienced team members. Your contributions will not only enhance our security posture but also set the foundation for your professional growth.

You will gain exposure to various aspects of cybersecurity, including Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), and other critical areas.

Whether you are a recent college graduate or someone with a foundational understanding of cybersecurity concepts, this role will provide the platform you need to advance your career in this exciting field.

Responsibilities:

• Independently serves as the initial point of contact for event review, acting as the first eyes on glass.

• Conduct thorough investigations and triage security events to determine their nature and severity.

• Partners on complex or high-severity events with Senior / Lead Analysts for further review and action.

• Collaborates and provides solutions to senior team members to improve processes.

• Independently maintainsaccurate documentation of incidents and actions taken.

• Engages and facilitates ongoing learning opportunities to expand knowledge in SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and other relevant areas.

• Leverage automation and orchestration solutions to automate repetitive tasks.

• Work alongside other security team members to search for and identify security issues generated from the network, including third-party relationships.

Core Competencies:

• Thorough understanding of cybersecurity, to include coding, problem-solving, SIEM, and EDR concepts.

• Strong analytical skills and attention to detail.

• Excellent communication skills, both written and verbal.

• Ability to work collaboratively in a team environment and seek guidance from senior members.

Certifications & Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

• 4+ years in cybersecurity or related field is strongly encouraged.

• Certifications in cybersecurity (e.g., CompTIA Security+, CEH) are a plus but not mandatory.