A Decisive Contributor who can support and enrich an enterprise-wide incident identification and resolution program. You are a Determined individual who thrive on investigations, and you deliver with precision. You see opportunities where others see challenges.
You will:
- Actively drive IT Security response engagements to completion
- Ability to support and validate security requirements of IT solutions
- Participate in and support a team of 9+ SOC analysts and subject matter experts
- Actively participate in development of cyber security offerings
- Consult on operational practices to protect information
- Participate in proactive threat hunting to detect incidents
- Guide and mentor fellow analysts with investigation and mitigation of security threats and incidents.
- Monitor security consoles and ticket queues for events, and drive to resolution
- Learn, support and enrich new security platforms in an enterprise environment
- Work in a 24x7, fast paced environment with best-in-industry IT Security incidents and technologies
Your background:
As a SOC Analyst, you have:
- 2 - 5 years of experience in security incident response and technical forensics investigation
- 2 - 5 years of experience in IT Network or Cyber Operations
- Incident handling and forensics skills including knowledge of common probing and attack methods, network/service discovery, system assessment, viruses and other forms of malware.
- Ability to monitor and analyze SIEM, endpoint, network (Firewall,IPS), and application logs
- Extensive documentation skills with Excel, PowerPoint and ticketing systems
- Ability to prepare reports of analysis and results to provide briefings to management
- Skills in performing and optimizing operational processes
- Technical expertise in supporting modern and cutting-edge security technologies
Preferred
- Bachelor s degree in information security, Computer Science or equivalent
- Information Security Certifications such as CISSP, CRISC, and/or CISM
- Experience interfacing with other internal or external organizations regarding failure and incident response situations
Knowledgeable and experienced in:
- SIEM (Exabeam) or other UEBA platform
- IDS/IPS (Cisco/Sourcefire/Palo)
- EDR (CrowdStrike)
- Email Security (Proofpoint)
- IRT Coordination
- SOC/MSS
- Daily Threat Dashboard Reporting
- MITRE Framework implementation and auditing
- Scripting and automation
Role: Technical Lead
Industry Type: IT Services & Consulting
Department: Engineering - Software & QA
Employment Type: Full Time, Permanent
Role Category: Software Development
