Job Description:

The SOC Analyst will be responsible for protecting the company or client information technology assets. The key responsibility of the role will be to perform initial analysis, identification, remediation, and documentation of network intrusions and computer system compromises.

Roles and Responsibilities:

Responsible for the tracking and assignment of tickets/events generated by Tier 1 Analyst(s).
Handle incident escalations as necessary from other analysts. Project manage incident responses and coordinate remediation with clients.
Create rules, filters, active channels, queries, trends and all other informational content based on use cases.
Develop, implement, maintain and execute standard content development practices for SIEM Platform.
Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.
Reviews and collects asset data (configs, running processes, etc.) on these systems for further investigation.
Experience hunting proactively for threats within an enterprise, investigating computer network intrusions in an enterprise and experience with SIEM and/or log aggregation technologies such as IBM, ArcSight, Splunk or any other SIEM technology tools.
Analyze threat and vulnerability alerts, determine current impacts, and coordinate remediation actions as necessary.
Proactively research and monitor security-related information sources to aid in the identification of threats to networks, systems, and intellectual property.
Collaborate with other teams to assess risk and develop improvement strategies for security posture.
Responsible for creating filters, reports, dashboards, and alerts in support of Cyber Operations.
Tune correlation rules and event data quality to maximize SIEM system efficiency.
Provide support, recommendations and optimization for the SIEM platform.
Providing leadership and mentoring to other analysts, perform basic malware analysis and forensic analysis of network activity, disks, and memory.
Develop and deliver internal and client-facing program reviews, status reports, performance reports and other communications.
Lead technical meetings and workgroup sessions with relevant SMEs.

Qualifications & Requirements:

Bachelor’s degree in Computer Science, Engineering, Business, or related field or equivalent work experience in SOC IDS/IPS Monitoring.
Often holds intermediate-level certification(s) in work field such SANS – GCIH, Product Symantec/MacAfee, Comptia Security+, and ITIL Foundation.
Typically 3+ years of relevant experience.
Experience with SOC Processes.
Experience with SIEM technology and tools (such as RSA, Arcsight, Splunk and QRadar), anti-Virus/Malware, anti-DDOS, WAF, FW Rules Management, forensic tools.
Excellent Knowledge and experience in IT Security Technologies.
Background in Vulnerability Management, Security Incident Management, Forensic Analysis.
Ability to translate security impacts to the wider business. • Willingness to work outside office hours as part of the CSIRT Team.
Ability to work in an international context and excellent communication skills
Interpersonal skills with the ability to establish and working relationships in a project-based / client-serving model, and to work closely with people at different levels of an organization.

We're sorry… the job you are trying to apply for has been filled.