Security Operations Center Analyst

Overview A Security Operations Center or SOC is an Organizational or Business Unit operating at the center of Security operations to manage and improve an organization's overall security posture. Its primary function is to detect, analyze and respond to cybersecurity events, including threats and incidents, employing people, process and technology. Teams are responsible for managing security infrastructure. There are several different roles and responsibilities within SOC, from a tier 1 analyst to specialized roles like threat hunters.Key Responsibilities Monitor security alerts and events using security tools.Conduct initial triage and analysis of security incidents and work on containment.Respond to security incidents by following established incident response protocols.Document and track incidents, findings, and remediation actions in the ticketing system.Collaborate with L2 analysts to escalate and investigate complex security threats.Familiar with SIEM and handling alerts. (Preference Splunk, DEVO)Have a good understanding of EDR and how to handle alerts and remediate them. (Preference SentinelOne EDR)Assist in the deployment and maintenance of security solutions (e.g., antivirus, EDR).Stay informed about the latest security threats, vulnerabilities, and industry best practices.Take instructions and convert them into SOPs.Participate in regular training to enhance skills in security and incident response.Create and maintain documentation for security incidents, analysis findings, and response procedures. Prepare reports and present findings for the next level of support.Coordinate with core security team and regulatory bodies for compliance.Qualifications and Required Skills Bachelor's degree in computer science, Information Technology, or related field; IT-related certifications (e.g., CompTIA A+, CEH, Security+) are a plus.2+ years of experience as a SOC analyst/executive.Strong verbal and written communication skills.Excellent problem-solving skills.Basic understanding of networks; good knowledge of MS Windows and Unix operating systems.Willing to work in a 24/7 environment, motivated to work in a fast-paced environment and handle multiple tasks simultaneously.Good understanding of operational frameworks like ITIL and operations processes.Employment and Location Job function: Information TechnologyIndustries: IT Services and IT Consulting and Semiconductor ManufacturingEmployment type: ContractSeniority level: Mid-Senior level#J-18808-Ljbffr

Government Careers

Show more