Ankura is a team of excellence founded on innovation and growth.
Key Responsibilities
- Monitor and perform initial triage of security alerts.
- Investigate user-reported phishing and suspicious emails.
- Perform basic email-header analysis and understand SPF, DKIM, and DMARC.
- Analyze suspicious URLs, attachments, and indicators of compromise.
- Monitor and triage endpoint-security alerts.
- Support day-to-day Zscaler operations and troubleshoot user connectivity or access issues.
- Investigate web-access, URL categorization, and security-policy related requests.
- Provide initial support for identity and MFA-related security issues.
- Respond to security-related user queries and service requests.
- Document investigation findings and maintain accurate security tickets.
- Escalate complex or confirmed security incidents to senior SOC analysts.
Required Skills and Experience
- 3-5 years of experience in SOC, Cybersecurity Operations, or Information Security.
- Good understanding of phishing, malware, email security, and endpoint security.
- Experience with Zscaler or similar web-security technologies.
- Experience with EDR solutions such as SentinelOne or Microsoft Defender.
- Understanding of email security concepts, including SPF, DKIM, and DMARC.
- Basic understanding of Microsoft Entra ID, MFA, and identity security.
- Basic knowledge of networking concepts, including TCP/IP, DNS, and HTTP/HTTPS.
- Strong troubleshooting, analytical, communication, and documentation skills
Good to Have
- Experience with Proofpoint or Microsoft Defender for Office 365.
- Familiarity with Microsoft Sentinel or another SIEM platform.
- Exposure to Varonis, KQL, Conditional Access, or basic log analysis.
- Experience with ServiceNow or a similar ticketing system.
- Relevant certifications such as Security+, SC-200, or SC-900.
- Key Competencies
- Strong analytical and troubleshooting skills.
- Attention to detail and the ability to manage multiple security requests.
- Good communication and documentation skills.
- Team-oriented, willing to learn, and able to identify when escalation is required
*
Ankura is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability. Equal Employment Opportunity Posters, if you have a disability and believe you need a reasonable accommodation to search for a job opening, submit an online application, or participate in an interview/assessment, please email accommodations@ankura.com or call toll-free +1.312-583-2122. This email and phone number are created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues unrelated to a disability, will not receive a response.
