SOC Analyst-SIEM-US

SOC Analyst-SIEM

We are currently looking to hire a new SOC Analyst to backfill a resource who left the program unexpectedly. Please find the job requirements below, and make sure to note the schedule.

SOC Analysts are expected to work holidays and weekends, if they land during their set 4x10 weekly schedule.

Schedule:

Wed – Sat, 10:00am – 8:00pm, or as needed for escalations; includes holidays

Location:

NYC, NY. Please target local resources to NYC NY only for now or someone is ready to go onsite as per client’s requirement. Must be a US Citizen.

• Perform security monitoring and analysis leveraging SIEM and security tools
• Conduct technical analysis and correlation of operating system, database, application, cloud and network logs to triage potential security events and incident investigations
• Analyze tactics, techniques, and procedures (TTPs) for various intrusion sets
• Develop custom SIEM content and tune security tools to prevent, detect and respond to malicious activity
• Utilize EDR and network security tools to conduct host and network-based detection analysis
• Conduct vulnerability scans and participate in tabletop exercises
• Improve the incident response process through tabletop exercises, playbook development, and standard operating procedures
• Day to day, primarily first responder to incidents

• Must have experience using various Threat Intelligence tools
• Experience managing ticket escalations, and incident response coordination across engineering, security, and management teams
• Experience in IDS/IPS, SIEM, EDR, DLP, Firewalls, DNS security, cloud security, Windows and Linux systems, etc.
• Familiarity with the Cybersecurity Framework (CSF) and a threat intelligence framework such as MITRE ATT&CK
• Deep knowledge of threat and vulnerability analysis
• Extremely detail-oriented and ability to quickly investigate ongoing and emerging threats
• Experience in developing, acquiring, maintaining and implementing threat intelligence
• Strong computer knowledge (hardware & operating systems)
• Strong network knowledge
• Excellent communication skills (Phone/Email)
• Strong forensics background (soft requirement) (Must have)
• Ability to interact and assist users over the phone
• Ability to communicate with confidence and ensure the highest level of professionalism
• Ability to write clear emails to non-technical staff and send incident updates to upper management when required