Trust Operations Analyst

Who we are DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com Job summary The Trust Operations Analyst will help advance the security operations of DigiCert by identifying potential risks, and threats by performing real-time log analysis. The Trust Operations Analyst will make use of analyses and understanding of exploits and vulnerabilities to maintain and improve DigiCert’s security posture and hygiene. This position will work on security incidents as they arise with the team. What you will do • Provide analysis of security threats and problems. • Management and evaluation of security alerts and detections • Work through tickets and resolve tickets per defined SLAs • Participate in Security Incident Response and analysis of incidents • Assist in the configuration, management, and maintenance of various security related software and systems • Be able to effectively work within a team, and self-sufficient/self-motivated when assigned solo work • Willingness to stay current on emerging threats, vulnerabilities, audit framework updates, etc to help protect DigiCert’s systems • Willingness to evaluate new tools to improve efficiencies in operational processes • Actively participate in ongoing training and knowledge transfer with team members • Provide metrics and statistics to management • Critically assess current practices and provide feedback to management on improvement opportunities • Understand policies and standards and be capable of conveying those requirements to end users • Set clear expectations and provide timely follow-up as appropriate • Provide audit support for Compliance • Other duties and responsibilities as assigned • Willing to work incident response as necessary and work with other groups when this occurs What you will have • 3+ years of experience in Information Technology or related technical discipline • Advanced level of knowledge of Information Security design concepts and principles • Must have strong written and verbal communication skills • Customer Service background and good interpersonal and organizational skills • Ability to perform in depth log analysis • Ability to work incidents, experience responding to security incidents in the past • Ability to look at logs and understand the systems that could be affected • Willingness and ability to obtain CISSP certification if not already completed PREFERRED QUALIFCATIONS & EXPERIENCE • Master’s degree in a technical discipline • 2+ years of experience in Information Security • 2+ years of experience with SIEM technologies (preferably Splunk) • Experience with cloud-based identity providers, SSO, SAML, etc • Experience with zScaler products • Experience with Web Application Firewall and DDoS protection • Experience with web application security technologies • Experience with vulnerability management software (preferably Tenable) • Experience with endpoint detection and response software (CrowdStrike preferred) • Experience with scripting languages (Python, Go, PHP, Powershell, Bash, etc) • Experience with Help Desk • Knowledge of penetration testing practices and principles • Certified Information Security Professional (CISSP) Benefits • Competitive compensation and comprehensive health, dental, and vision coverage • Retirement savings programs with company matching (401(k)