Cybersecurity Operations Analyst
COMPANY SUMMARY
Since 1992, Kingland's managed solutions have helped data-intensive, highly-regulated clients connect and protect their businesses. Kingland develops and manages enterprise-class software solutions using its Kingland Platform and teams of data and technology experts. Clients in the banking and capital markets, public accounting, insurance, and healthcare industries look to Kingland to create solutions to manage data, risk, compliance, customer insight and more. The Kingland Platform is a highly secure, cloud-optimized software platform that includes enterprise data management, text analytics, artificial intelligence and machine learning, and workflow and compliance management capabilities.
We are a team of talented individuals coming together to creatively solve complex problems, build great software, and deliver confidence to our clients. We strive to embody our core values of authenticity, creativity, excellence, and ownership throughout the workplace and provide our employees with exciting opportunities to grow year after year. With software that helps to ensure fairness, honesty, and transparency on a global stage, we seek people who believe in that mission as well - because we take pride in our reputation for serving our clients like no one else can.
Kingland is growing fast. We believe that each employee serves a vital role to the business and contributes to the success we see year and year again. Kingland is looking for individuals who like to tackle big challenges, want to work on mission-critical solutions, and have a desire to make a difference in the world. Kingland rewards the efforts that are given and treat their employees with appreciation and gratitude. Explore all the ways that quality of work meets quality of life at Kingland, and launch yourself on an exciting new adventure.
POSITION SUMMARY | Cybersecurity Operations Analyst
The Cybersecurity Operations Analyst is responsible for the success of security operations activities managed by the Kingland Security Office. The Cybersecurity Operations Analyst may work with stakeholders from a variety of teams to help ensure that each department of Kingland adheres to corporate security policies and standards. The Cybersecurity Operations Analyst will primarily monitor Kingland our SIEM and EDR solutions, perform triage and analysis of Tier 1 alerts, and provide security centric operational support for Kingland Corporation, clients, and our software products. This role is also responsible for working with the Chief Security Officer, internal Kingland teams, as well as external auditors to ensure Kingland's practices, internal policies, and processes remain in alignment with the appropriate external industry standards and practices.
RESPONSIBILITIES AND DUTIES | Cybersecurity Operations Analyst

• Monitoring security events using SIEM and EDR tools.
• Assist with configuration of SIEM and EDR tools.
• Ability to work an "on-call" rotation for afterhours support.
• Conduct internal phishing campaigns.
• Respond and analyze reported phishing emails.
• Assist with investigating and advising on business impact from threat modeling of vulnerabilities.
• Participating in internal and third-party audits as needed.
• Participate in the Cybersecurity Incident Response Team to employ strategy, standards, processes, and technology to detect, respond, and recover from security incidents and limit occurrence or reoccurrence by using risk-based triage.
• Stay abreast of Cybersecurity best practices and emerging technologies to provide security recommendations tailored to specific requirements and needs.
• Reviewing and approving both RBAC and temporary access role escalations as well as additional Identity and Access Management processes
• Create and maintain corporate security training modules related to Incident response, phishing, role based training, and general security awareness trainings.

POSITION REQUIREMENTS | Cybersecurity Operations Analyst

• Bachelor's degree and 2 years of SOC or Security Operations Experience or 3 years requisite experience as a SOC Analyst, IR team responder, or similar role.
• Knowledge and understanding of data security controls including malware protection, firewalls, intrusion detection systems, content filtering, Internet proxies, encryption controls, and log management solutions.
• Strong work and time management skills and attention to details.
• Strong analytical skills and the ability to think critically.
• Ability to adapt quickly to changes in priorities.
• Ability to travel to Clear Lake and Ames, Iowa office locations.
• The ideal candidate works hybrid from the Ames office 1-3 days per week.

DESIRED SKILLSETS | Cybersecurity Operations Analyst

• 2 years of experience with SIEM solutions such as QRadar, Splunk, SumoLogic Cloud SIEM, Kibana, Security Onion, ArcSight or similar.
• Experience working with EDR solutions.
• Experience with Atlassian Products (Confluence & Jira).
• Experience gathering, reading, and acting upon Threat Intelligence.
• Experience identifying IOC's and writing detection rules.
• Familiarity with Palo Alto Firewalls.
• Familiarity with AWS, GCP, and cloud monitoring solutions.
• Automation experience with tools and practices used in a Security Operations Center such as XSOAR.
• Familiarity with one or more of the following programming or scripting languages. Java, Python, C, Ruby, PowerShell, Bash or similar.
• Certifications in one or more of the following are preferred: CC, SSCP, A , NET , Security , GISF, GSEC, or similar Intermediate level certificates.

LOCATION

• This position will be based out of our modern office location in Ames, Iowa.