Job Description
Role Name: Security Operations Center Analyst II
\n
Location: Antioch, TN
\n
Work Environment: Onsite
\n
Duration: Full-time
\n
Shift: Mon - Fri, 40hrs/week
\n
\n
Job Description:
\n
The Security Operations Center Information Security Analyst II will be part of the SOC Team. This center monitors, analysis and responds to infrastructure threats and vulnerabilities on a 24x7 basis
\n
- \n
- Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24X7 SOC environment to immediately detect, verify, and respond swiftly to cyber threats, and remove false positive. Strong networking background.
- The analyst performs monitoring, research, assessment and analysis which requires demonstrable security incident response experience.
- Serve as a technical point of escalation and provide mentoring for L1 Security Operations Center (SOC) analysts.
- Handling security alerts on Splunk SIEM and Raise tickets based on the alerts.
- Follow ups with respective team to close the alerts, tickets.
- Analyze and assess security incidents and escalate to appropriate internal teams for additional assistance.
- Responsible for investigating incidents, analyzing attack methods, researching new defense techniques and tools, developing security policy, and documenting procedures for SOC.
- Malware analysis and other attack analysis to extract indicators of compromise. Perform data security event correlation between various systems.
- Prepare reports, summaries, and other forms of communication that may be both internal and client facing.
- Maintain familiarity with industry trends and security best practices.
- Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.
- Periodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Basic Qualifications (Minimum Required Experience, or Education, Knowledge/Skills/Abilities, Essential Physical Demands):
\n
EDUCATION AND/OR EXPERIENCE:
\n
- \n
- 5+ years working in the Security operations Centre.
- Bachelor’s degree in engineering or higher preferred
- Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)
- Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)
- Knowledge of cutting edge threats and technologies effecting Web Application vulnerabilities and recent internet threats
- Exposure on Vulnerability assessment as well as penetration testing or forensic analysis fields are an advantage
- Experience working as part of a global team, spanning multiple time zones and cultures.
\n
\n
\n
\n
\n
\n
\n
\n
Certifications/Preferred Skills Desired
\n
- \n
- Certifications preferred: CEH
\n
\n
MACHINES, EQUIPMENT, AND SOFTWARE: Required: MS Office
\n
Strongly Preferred: Cisco Network devices, Nexpose or Insight VM, Splunk, Crowdstrike, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365.
\n
PHYSICAL DEMANDS AND WORKING CONDITIONS: Office work, possible international travel up to 5%
\n
\n
\n
\n
Applicant Notices & Disclaimers
\n
- \n
- For information on benefits, equal opportunity employment, and location-specific applicant notices, click here
\n
\n
\n
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.This position's pay range is $50000.00/Yearly - $60000.00/Yearly.