SOC Analyst - Level 2

Company: CiraInfoTech
Location: Alpharetta
Posted on: May 21, 2020

Job Description:

Onsite Role ( Remote initially due to COVID 19 Situation ) Fulltime ( Open to 3 month C2H) Sponsorship available for right Consultants SOC Analyst Job Responsibilities Part of Managed Detection and Response (MDR) team to effectively prepare, detect, and respond to incidents. Perform analysis of log files from a variety of sources (e.g., network traffic logs, firewall logs, and intrusion detection system IDS logs) to identify possible threats to network security Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs) Detect and respond to alerts from end point detection response tools. Establish vulnerability management program using systematic scanning, risk evaluation, and coordination to remediate or mitigate identified vulnerabilities. Provide escalation support and document resolutions for improvement Work with the Account Management team as a Security SME to advise clients on applicable security solution technology, practices, managed services, and available solution programs. Provide weekly and monthly reports on Security Incident Response team activities Coordinate and provide expert technical support to resolve cyber defense incidents. Coordinate with intelligence analysts to correlate threat assessment data Monitor external data sources (e.g., cyber defense vendor sites, US-CERT, OpDivs, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise Investigate anomalies observed within the network and to remediate network and systems outages Experience working with NDR tools as well as SIEM tools such as LogRhythm, Rapid7, Splunk etc. Familiarity with industry standards such as PCI DSS, HIPAA, CIS Critical Controls, NIST, OWASP. Experience in creating, documenting, and maintaining policies, procedures, and workflows is strongly preferred.

Keywords: CiraInfoTech, Alpharetta , SOC Analyst - Level 2, Professions , Alpharetta, Georgia