What are the responsibilities and job description for the Jr. Cybersecurity Analyst Intern position at Hunting?
General Overview:
Assist in identifying and correcting weaknesses in the company’s security systems, solutions, and programs while recommending specific measures that can improve the company’s overall security posture. Perform administration of various security tools to ensure effective policy, configuration, performance, and health. Assist in upcoming migration to a new Secure Mail Gateway solution.
Responsibilities:
Education and Training
Assist in identifying and correcting weaknesses in the company’s security systems, solutions, and programs while recommending specific measures that can improve the company’s overall security posture. Perform administration of various security tools to ensure effective policy, configuration, performance, and health. Assist in upcoming migration to a new Secure Mail Gateway solution.
Responsibilities:
- Carry out various IT projects and tasks assigned by management.
- Requires a proactive person with awareness of Windows desktop operating systems, mainstream business applications, troubleshooting tools, system maintenance, secure mail gateway, Mobile Device Management, Phishing Campaigns, Security Awareness Training, Virtual Takedowns, MFA, Malware Analysis, Windows Server OS, and Endpoint Management
- Familiarity with Managed Detection & Response platforms and investigating alerts utilizing Endpoint Detection & Response solutions, such as SentinelOne. Will assist senior colleagues in reviewing alerts from the MDR platform, conducting analysis, investigation, recommendation of solution(s), and upon approval, may be responsible for implementing the solution(s), ultimately conducting triage.
- Must be able to handle fast paced workflows.
- The ability to multi-task and work with team-members, including senior colleagues for guidance & support.
- Perform administration of security systems and/or implement solutions as approved by senior colleagues.
- Review security alerts and take steps to protect company information/systems.
- Monitor security network access.
Education and Training
- High School diploma or GED equivalent is required.
- Must be actively pursuing a degree in Cyber Security or Information Assurance
- Evaluate, prioritize, and execute multiple requests from management and senior colleagues for assistance on security solutions, business software, enterprise systems, and mobile devices.
- Accurately record, track and document help desk service requests to final resolution using established systems.
- Prepare progress reports and update management on status of problems/projects on a regular basis.
- Responsible for the creation and on-going management of active directory user/security groups for:
- Applications
- Privileged access
- Network directories.
- Responsible for identifying data owners/custodians & ensuring that proper approvals are granted prior to providing users with access to restricted data.
- Will work with the Systems team to implement access requests and address IAM security weaknesses.
- Manages company UDM solution, Microsoft Intune: enrollment/onboarding, policy, enforcement, retirement.
- Smart Phones
- Tablets
- Workstations (BitLocker)
- Analyzes all emails reported as phishing utilizing existing solutions to review email header, attachment/link detonation in a sandbox environment, responding as necessary.
- Assist with day-to-day administration of the Secure Mail Gateway solutions in terms of creating policy, message tracking, reviewing items in the administrative hold/quarantine, analyzing malicious mail trends within the environment, and changing policies as required to proactively protect the organization. Manages the whitelist/blocklist.
- Assist senior colleagues with tasks pertinent to the Security team’s goal of supporting the business.
- Ability to communicate effectively with all levels of personnel within the organization, as well as external parties.
- Familiarity of tools and methods for local and remote troubleshooting of problems
- Familiarity of Microsoft networking includes Active Directory, Security, DNS, Share permissions, etc.
- Strong problem-solving and analytical skill
- Familiarity with network security best practices
- Knowledge in Windows Server OS administration
- Familiarity with Email forensics and email header analysis
- Familiarity with: Phishing Analysis, Threat intelligence, Digital Forensics, Incident Response, MITRE ATT&CK Framework
- Stay up to date with current threat landscape, attack vectors, active APT’s, etc. as they pertain to the Oil & Gas Manufacturing industry.