AppGate is a leading cybersecurity company and pioneer in the Zero Trust Network Access (ZTNA) market focused on providing cutting-edge solutions that protect organizations from evolving threats. Our mission is to support the warfighter, the national security community, and critical infrastructure by providing trusted access that ensures mission success.
L1 Analyst
Location
Colombia
Posted
3 days ago
Salary
0
Seniority
Mid Level
Job Description
L1 Analyst
AppGate Cybersecurity, Inc.
Role Description We are looking for a highly curious and proactive L1 Analyst to join our GFC operations team. In this role, you will take on the first line of defense with an analytical approach, handling the investigation and mitigation of cybersecurity events for our clients. We value curiosity above all. We are looking for someone who doesn’t just see an alert and pass it on, but who asks "why?", digs deeper into data, investigates anomalies, and actively proposes new ideas and tools to improve our processes. Qualifications - Education: Student or Graduate in Systems Engineering, Telecommunications, Electronics, Mechatronics, or similar. - Experience: At least 1 year of experience in operations environments (SOC, Help Desk, or similar roles). - Technical Knowledge: - Solid understanding of Windows and Linux Operating Systems. - Basic knowledge of HTML and web fundamentals. - Language: Intermediate English level (B1+ or B2, spoken and written). - Soft Skills (The Core of our Team): - Natural Curiosity: A passion for investigative work, asking the right questions, and going beyond the surface of an alert. - Innovation & Proactivity: Innovation is part of our organizational values; we want someone who brings ideas. - Effective communication, problem-solving skills, and adaptability to change. Requirements - First Responder: Act as the initial point of contact for security events received via tickets, email, and telephone, ensuring elite communication with clients. - Proactive Threat analysis & Monitoring: Perform continuous monitoring, proactive searches, threat analysis, and vulnerability assessments using both documented procedures and your own investigative instinct. - Incident Response & Escalation: Solve technical problems independently. When necessary, accurately escalate complex issues to Level 2 analysts and Team Leaders. - Continuous Improvement: Actively participate and propose ideas in investigations focused on key information gathering. Explore and test new monitoring and remediation tools. - Documentation & Best Practices: Meticulously document all actions taken within incident management. Recommend improvements to GFC processes, procedures, and security policies of the area. - Team Collaboration: Collaborate with local team members, external staff, and participate in the training of junior analysts and interns. Benefits - Extensive Health Insurance Coverage for the Employee and Their Family - Fitness Allowance - Remote Work Stipend - Access to an E-Learning Platform
Related Guides
Related Categories
Related Job Pages
More Incident Response Analyst Jobs
Incident Response Analyst
Concurrent Technologies CorporationGoing above and beyond to create innovative, full lifecycle solutions. We make the world safer and more productive.
Role Description Atuação no desenvolvimento e evolução de automações de resposta a incidentes, com foco na construção de playbooks e integrações entre ferramentas de segurança e TI. O profissional será responsável por otimizar processos de resposta, aumentar a eficiência operacional do SOC e contribuir para a maturidade das operações de segurança por meio de automação. - Desenvolver e manter playbooks de resposta automatizada a incidentes - Integrar soluções de segurança como EDR, SIEM, ferramentas de ITSM e e-mail - Analisar falhas em automações e ajustar a lógica dos fluxos de resposta - Criar e manter documentação técnica dos processos automatizados - Apoiar a geração de relatórios e métricas relacionadas às automações Qualifications - Experiência com plataformas SOAR, preferencialmente D3 Security - Experiência com integração via APIs - Conhecimento em scripting (Python e/ou JavaScript) - Domínio de fluxos de resposta a incidentes (Incident Response) - Experiência com integração de ferramentas de ITSM (ex.: ServiceNow, GLPI) Requirements - Treinamentos ou certificações em plataformas SOAR - Certificação SANS SEC450 ou equivalente - Experiência prévia em ambientes de SOC com automação de processos
Incident Handler
Rapid7At Rapid7, our vision is to create a secure digital world for our customers, our industry, and our communities. We do this by harnessing our collective expertise and passion to challenge what’s possible and drive extraordinary impact. We’re building a dynamic and collaborative workplace where new ideas are welcome. Protecting 11,000+ customers against bad actors and threats means we’re continuing to push the envelope - just like we’ve been doing for the past 20 years. If you’re ready to solve some of the toughest challenges in cybersecurity, we’re ready to help you take command of your career. Join us.
Incident Handler II, Detection & Response Services We are looking for people with a passion for investigation and forensic analysis to join our MDR SOC team at Rapid7. As an Incident Handler II, you will work side by side MDR SOC analysts and MDR Incident Responders to investigate incidents ranging from commodity malware to sophisticated threat actors. About the Team Rapid7's Managed Detection and Response (MDR) team is built from the ground up to bring motivated and passionate security talent face to face with emerging threats, practical challenges, and evil at scale. Our MDR service uses an impact-driven mindset to focus efforts on effective solutions, encouraging personal and technical innovation within the SOC. MDR provides 24/7/365 monitoring, threat hunting, incident response, and more with a focus on endpoint detection and behavioral intelligence. About the Role As an Incident Handler II in Rapid7's SOC, you will be responsible for investigating and analyzing malicious activity in a multitude of customer environments. You will be enabled to complete investigations scaling in complexity from account compromises and commodity malware infections, to complex web server compromises and zero-day vulnerability exploitation. The trigger for the majority of these investigations will be from inbound customer requests, but you will also receive investigations handed off to you from frontline analysts. There may be times where you're triaging alerts using Rapid7's award-winning SIEM, InsightIDR, where you'll find malicious activity that you'll need to investigate and escalate to customers. In these investigations, your Cybersecurity Advisor colleagues will be largely responsible for direct communication with the customers regarding your investigations, however you will be expected to engage with customers as needed to drive more complex investigations forward. Lastly, you're the go-to person for handling incident response engagements run by Rapid7's Incident Response team. In this role, you will: - As a core duty, you will conduct investigations into a variety of malicious activity on workstations, servers, and in the cloud. You will investigate all levels of incidents, including Incident Response engagements in which you will provide analysis assistance to Rapid7's Incident Responders, including scoping, timeline analysis, finding IAV, and helping update documents as needed. - Own complex investigations that may need various levels of delegation, customer communication, documentation, and collaboration across teams. - Be an escalation point for complex and advanced incidents. - Communicate with Cybersecurity Advisors regarding investigation findings, Requests For Information from clients, and remediation and mitigation recommendations. - Directly communicate with customers regarding investigation findings or to assist in driving an investigation forward as needed. - Prepare Incident Reports for each minor incident investigation you complete, which follow MITRE's ATT&CK Framework and include your own forensic, malware, and root-cause analysis. - Communicate with other analysts to share new intelligence regarding tactics, techniques, and trends utilized by threat actors. - Provide continuous input to Rapid7's Threat Intelligence and Detection Engineering team regarding new detection opportunities. - Assist in customer engagement opportunities pertaining to the function of your role in the MDR service as necessary. - Participate in projects that directly relate to your role in an effort to increase positive customer outcomes. - Utilize Rapid7's world-class software to triage and investigate alerts to identify potential compromises in customer environments as necessary. The skills you'll bring include: - 3-4 years of experience in a cybersecurity related position (SOC and/or SIEM analysis experience preferred) - Dedication to putting each customer's needs and concerns at the forefront of all decision making. - Understanding of core operating system concepts in Windows, MacOS/Darwin, and Linux. This includes at least an understanding of common internal system tools and directory structures. - Proficiency with analyzing forensic artifacts to determine root cause analysis in investigation - Windows largely preferred, but bonus points for experience with Linux, AWS, Azure, and GCP) - A fundamental understanding of how threat actors utilize tactics such as lateral movement, privilege escalation, defense evasion, persistence, command and control, and exfiltration. - Effective verbal communication skills that foster collaboration between the MDR SOC and the Incident Response team; this role serves as the bridge between our major service delivery functions. - Strong written communication skills - Some experience with static and dynamic malware analysis. - Passion for continuous learning and growth in the cybersecurity world. We know that the best ideas and solutions come from multi-dimensional teams. That's because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today. About Rapid7 At Rapid7, we are on a mission to create a secure digital world for our customers, our industry, and our communities. We do this by embracing tenacity, passion, and collaboration to challenge what's possible and drive extraordinary impact. Here, we're building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 10,000 global customers ahead of whatever's next. Join us and bring your unique experiences and perspectives to tackle some of the world's biggest security challenges. #LI-WP1 #LI-Remote About Rapid7 At Rapid7, our vision is to create a secure digital world for our customers, our industry, and our communities. We do this by harnessing our collective expertise and passion to challenge what's possible and drive extraordinary impact. We're building a dynamic and collaborative workplace where new ideas are welcome. Protecting 11,500+ customers against bad actors and threats means we're continuing to push the envelope just like we' ve been doing for the past 20 years. If you 're ready to solve some of the toughest challenges in cybersecurity, we're ready to help you take command of your career. Join us. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, protected veteran status or any other status protected by applicable national, federal, state or local law.
Contract Analyst
State of GeorgiaThe State of Georgia, otherwise known as the "Peach State" or the "Empire State of the South," was the fourth American territory inducted into the United States
Assist Contract Managers with drafting, reviewing, and processing contracts, amendments, and renewals. Maintain contract files (digital and/or physical) to ensure documentation is complete and audit-ready....
Incident Management Investigator
CareSourceThis job description is not all inclusive. CareSource reserves the right to amend this job description at any time. CareSource is an Equal Opportunity Employer. We are dedicated to fostering an environment of belonging that welcomes and supports individuals of all backgrounds.
Role Description The Incident Management Investigator conducts clinical case investigations related to incidents submitted to the incident management system. - Investigation includes interviewing member, claimant (if claimant is not the member), personal caregivers, facility staff and others. - Contacts providers & their employees, business partners and representatives from regulatory agencies and law enforcement in the conduction of investigations. - Develops member care plan including member and caregiver education and corrective action plans. - Collaborates with internal departments including, but not limited to, Care Management, SIU, Pharmacy, Medical Management, Provider Relations, Claims, Internal Audit, Regulatory, and Legal. - Develops and maintains contacts/liaison with business partners, law enforcement, regulatory agencies, state, other company staff and external contacts involved in fraud investigation, detection and prevention. - Proactively uses analytical skills to identify all potential areas of member concern including fraud, waste and abuse. - Responsible for assisting department in meeting all state, regulatory and departmental deadlines. - Recommends and participates in development and implementation of internal departmental policies and procedures. - Performs any other job related duties as requested. Qualifications - Associates degree required. - Equivalent years of relevant work experience may be accepted in lieu of required education. - Two (2) years of experience in healthcare operations, care coordination, escalation or management required. Requirements - Intermediate proficiency level with Microsoft Outlook, Word, Excel, Power Point, and Access is required. - Effective oral and written communication skills. - Ability to perform thorough investigations, develop care plans and see case through resolution and closure; ability to maintain confidentiality. - Ability to organize and prioritize daily workload & meet required deadlines. - Ability to work independently and as a member of a team to deliver high quality work. - Presentation skills necessary. - Knowledge of Medicaid and Medicare, preferred. - Knowledge of medical terminology, medical diagnostic, procedural terms, and instances of FWA. - Critical listening and thinking skills. Benefits - Compensation Range: $62,700.00 - $100,400.00. - In addition to base compensation, you may qualify for a bonus tied to company and individual performance. - We are highly invested in every employee’s total well-being and offer a substantial and comprehensive total rewards package. Working Conditions - General office environment; may be required to sit or stand for extended periods of time. - Travel is not typically required. Licensure and Certification - None. Company Description This job description is not all inclusive. CareSource reserves the right to amend this job description at any time. CareSource is an Equal Opportunity Employer. We are dedicated to fostering an environment of belonging that welcomes and supports individuals of all backgrounds.



