Trust Operations Analyst

Summary

DigiCert is a global leader in intelligent trust, providing security, privacy, and authenticity for digital interactions through its DigiCert ONE platform. The Trust Operations Analyst advances security operations by analyzing logs, identifying risks and threats, managing alerts, responding to incidents, supporting compliance, and improving security processes and systems.

Responsibilities

• Provide analysis of security threats and problems
• Management and evaluation of security alerts and detections
• Work through tickets and resolve tickets per defined SLAs
• Participate in Security Incident Response and analysis of incidents
• Assist in the configuration, management, and maintenance of various security related software and systems
• Be able to effectively work within a team, and self-sufficient/self-motivated when assigned solo work
• Willingness to stay current on emerging threats, vulnerabilities, audit framework updates, etc to help protect DigiCert’s systems
• Willingness to evaluate new tools to improve efficiencies in operational processes
• Actively participate in ongoing training and knowledge transfer with team members
• Provide metrics and statistics to management
• Critically assess current practices and provide feedback to management on improvement opportunities
• Understand policies and standards and be capable of conveying those requirements to end users
• Set clear expectations and provide timely follow-up as appropriate
• Provide audit support for Compliance
• Other duties and responsibilities as assigned
• Willing to work incident response as necessary and work with other groups when this occurs

Skills

• 3+ years of experience in Information Technology or related technical discipline
• Advanced level of knowledge of Information Security design concepts and principles
• Must have strong written and verbal communication skills
• Customer Service background and good interpersonal and organizational skills
• Ability to perform in depth log analysis
• Ability to work incidents, experience responding to security incidents in the past
• Ability to look at logs and understand the systems that could be affected
• Willingness and ability to obtain CISSP certification if not already completed
• Master's degree in a technical discipline
• 2+ years of experience in Information Security
• 2+ years of experience with SIEM technologies (preferably Splunk)
• Experience with cloud-based identity providers, SSO, SAML, etc
• Experience with zScaler products
• Experience with Web Application Firewall and DDoS protection
• Experience with web application security technologies
• Experience with vulnerability management software (preferably Tenable)
• Experience with endpoint detection and response software (CrowdStrike preferred)
• Experience with scripting languages (Python, Go, PHP, Powershell, Bash, etc)
• Experience with Help Desk
• Knowledge of penetration testing practices and principles
• Certified Information Security Professional (CISSP)

Qualifications

Must Haves

• 3+ years of experience in Information Technology or related technical discipline
• Advanced level of knowledge of Information Security design concepts and principles
• Must have strong written and verbal communication skills
• Customer Service background and good interpersonal and organizational skills
• Ability to perform in depth log analysis
• Ability to work incidents, experience responding to security incidents in the past
• Ability to look at logs and understand the systems that could be affected
• Willingness and ability to obtain CISSP certification if not already completed

Nice to Haves

• Master's degree in a technical discipline
• 2+ years of experience in Information Security
• 2+ years of experience with SIEM technologies (preferably Splunk)
• Experience with cloud-based identity providers, SSO, SAML, etc
• Experience with zScaler products
• Experience with Web Application Firewall and DDoS protection
• Experience with web application security technologies
• Experience with vulnerability management software (preferably Tenable)
• Experience with endpoint detection and response software (CrowdStrike preferred)
• Experience with scripting languages (Python, Go, PHP, Powershell, Bash, etc)
• Experience with Help Desk
• Knowledge of penetration testing practices and principles
• Certified Information Security Professional (CISSP)

Benefits

• Comprehensive health, dental, and vision coverage
• Retirement savings programs with company matching (401(k) or RRSP)
• Generous paid time off, including holidays, and vacation
• Paid parental leave and family support benefits
• Life and disability coverage
• Flexible spending and health savings options (where applicable)
• Health and wellness support, including gym reimbursement and wellness programs
• Employee Assistance Program with 24/7 confidential support for employees and families
• Education assistance and professional development opportunities
• Access to LinkedIn Learning and continuous learning resources
• Employee referral bonus program and additional company perks and discounts
• Internal rewards and recognition platform (Motivosity) to celebrate and acknowledge project wins, milestone achievements, and the outstanding contributions of our colleagues
• Business travel insurance and global employee support programs