Sr SOC Analyst

6 months ago

Bonita Springs, United States Bridge Technologies and Solutions Full time
Security Operations Analyst (SOC)
Job Purpose
The SOC Analyst will perform 24/7/365 monitoring and response activities in the Cyber Security Operations Center for security detection and mitigation activities. Duties include monitoring networks, hosts and endpoints for malicious activity using Security Incident and Event Management (SIEM) tools, Endpoint Detection and Response (EDR) tools, Antivirus and Malware detection tools and email security appliances. Responsibilities cover initial triage, investigation and incident response, the development of new security monitoring use cases, and ensuring all investigative activity is properly documented in our ticketing systems and followed up with relevant support teams. This role will also take joint responsibility for developing and maintaining SOC documentation and processes.

The SOC Analyst position is a rotating shift position that includes nights, weekends and occasional holidays.
Key Accountabilities
  • Responsible for working in a 24x7 Security Operation Center (SOC) environment.
  • Provide analysis and trending of security log data from a large number of heterogeneous security devices.
  • Provide Initial triage and Incident Response support when analysis confirms actionable incident.
  • Investigate, document, and report on information security issues and emerging trends.
  • Integrate and share information with other analysts and other teams.
  • Relevant work experience in Cyber Security Operations, specifically monitoring, detection and incident response duties.
  • Experience with monitoring and operating SIEM, EDR and IDS/IPS solutions alongside other critical monitoring toolsets.
  • Demonstrated ability to coordinate and respond to security incidents using commercial and/or open source technologies.
  • Experience with Incident Response methodology in investigations, and the groups behind targeted attacks and tactics, techniques, and procedures (TTPs)
  • Comprehension of how attacks exploit operating systems and protocols
  • Analyze and determine the scope of the compromise.
  • To research targeted attacks.
  • To develop, document and execute containment strategies.
  • To document and brief the business on remediation options and execute the plan with IS Partners - Produce final report and recommendation.
  • Coordinate efforts of, and provide timely updates to, multiple business units during response.
  • To perform in-depth analysis in support of incident response operations.
  • Develop requirements for technical capabilities for cyber incident management.
  • Investigate major breaches of security and recommending appropriate control improvements.
Qualifications
  • Relevant experience in a Security Operations environment is required.
  • Solid understanding of networking protocols and infrastructure designs; including cloud infrastructures, routing, firewall functionality, host and network intrusion detection systems, encryption, load balancing, and other network protocols.
  • Hands-on experience with security technologies, including:
    • Intrusion Detection & Prevention (IDP) Sourcefire or Palo Alto desirable
    • Security Information & Event Management (SIEM) Splunk required
    • Endpoint Detection & Response (EDR) Tanium and FireEye HX desirable
    • Network Analysis tools - Wireshark, tcpdump
    • Experience with scripting in Python, Bash and Powershell
  • Experience with the following SecOps processes is required:
    • Email Investigations Including Header Analysis, Office Doc Investigations and Macro Extraction
    • Basic Malware Analysis Static and Dynamic analysis
    • Event Log analysis
    • Solid understanding of Windows and Linux Operating Systems
  • Strong understanding of TCP/IP and underlying network protocols.
  • Excellent stakeholder management and influencing skills covering colleagues, partners / vendors and project sponsors.
  • Experience managing and/or supporting the operationalization of security tools and infrastructure.
  • Experience of managing and responding to information security, or cyber security, incidents in a large enterprise environment Strong background of information security incident management and response.
  • Experience interacting as an information security incident responder with internal business functions, e.g. legal, Ethics, HR and physical security.
  • Experience interacting as an information security incident responder with law enforcement and other external agencies such as FIRST or National Computer Emergency Response Teams.
  • Utilities experience highly desirable.
Key Interfaces
  • Security Operations Centre Analysts
  • Global Security Operations Manager
  • Incident Management Team (UK & US)
  • Threat Intelligence Team
  • Pen Testing Team
  • Security Engineering Function
  • IS partners and Service providers (Service Delivery & Major Incident Management)
  • OT Technical support

  • Security Operation Center

    4 weeks ago

    Colorado Springs, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphSuitability:Public Trust/Other Required:NoneJob Family:Cyber SecurityJob Qualifications:Skills:Cyber Incident Response, Cybersecurity, Incident HandlingCertifications:Experience:8 + years of related experienceUS...

  • Security Operation Center

    3 weeks ago

    Colorado Springs, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphPublic Trust/Other Required:NoneJob Family:Cyber SecurityJob Qualifications:Skills:Cybersecurity, Information Security, System SecurityCertifications:Cisco Certified Network Associate (CCNA) Security - Cisco, GICSP:...

  • Security Operation Center

    2 months ago

    Colorado Springs, United States General Dynamics Information Technology Full time

    Type of Requisition:RegularClearance Level Must Currently Possess:Top Secret/SCIClearance Level Must Be Able to Obtain:Top Secret SCI + PolygraphSuitability:Public Trust/Other Required:NoneJob Family:Cyber SecurityJob Qualifications:Skills:Cybersecurity, Information Security, System SecurityCertifications:Cisco Certified Network Associate (CCNA) Security -...

  • Assembler Sr. Application Analyst

    3 weeks ago

    Coral Springs, United States CapB InfoteK Full time

    For one of our multiyear projects we are looking for an Assembler Sr. Application Analyst out of Coral Springs FL. Responsible for Analysis, coding, testing, and maintaining application software. Supports existing business systems applications. Partners with senior developers and application architects to identify business need and appropriate technical...

  • Cyber Security Operations Center Lead

    4 weeks ago

    Colorado Springs, Colorado, United States General Dynamics Information Technology Full time

    Cyber Security Operations Center LeadWe are seeking a highly skilled Cyber Security Operations Center Lead to join our team at General Dynamics Information Technology. As a key member of our Cyber Security Operations Center, you will be responsible for leading a team of analysts in monitoring and analyzing potential threat activity targeting our...

  • Sr. Application Analyst with Assembler

    6 months ago

    Coral Springs, United States CapB InfoteK Full time

    For one of our long-term projects, we are looking for a Sr. Application Analyst with Assembler. Responsibilities: • Recent working experience in Assembler. • Knowledge in Assembler, CICS, COBOL, VSAM and DB2 is required and Knowledge on emerging technologies is plus. • Intertest experience is a huge plus. Expert in multiple languages and tools. •...

  • Insider Threat Support Analyst

    4 weeks ago

    Camp Springs, United States Evolver Federal Full time

    Evolver Federal is seeking a talented and motivated Insider Threat Support Analyst to join our team in Camp Springs, MD. The ideal candidate will have a strong background in cybersecurity, with expertise in insider threat detection and mitigation technologies such as Teramind and Splunk. As an Insider Threat Support Analyst, you will play a critical role in...

  • Senior Financial Analyst

    3 weeks ago

    Sandy Springs, United States Newell Brands Full time

    Job ID: 2000 Alternate Locations: Newell Brands is a leading $8.3B consumer products company with a portfolio of iconic brands such as Graco®, Coleman®, Oster®, Rubbermaid® and Sharpie®, and 25,000 talented employees around the world. Our high-performance culture, unparalleled curiosity about the world around us, and talented people fuel our success....

  • Insider Threat Support Analyst

    3 weeks ago

    Camp Springs, United States Evolver Federal Full time

    Evolver Federal is seeking a talented and motivated Insider Threat Support Analyst to join our team in Camp Springs, MD. The ideal candidate will have a strong background in cybersecurity, with expertise in insider threat detection and mitigation technologies such as Teramind and Splunk. As an Insider Threat Support Analyst, you will play a critical role in...

  • Sr. Analyst, Strategic Modeling

    3 weeks ago

    Sandy Springs, United States Newell Brands Full time

    Job ID: 2035 Alternate Locations: Newell Brands is a leading $8.3B consumer products company with a portfolio of iconic brands such as Graco®, Coleman®, Oster®, Rubbermaid® and Sharpie®, and 25,000 talented employees around the world. Our high-performance culture, unparalleled curiosity about the world around us, and talented people fuel our success....

  • Analyst w/ Amplitude, ad-hoc, Snowflake, PXL Tagging

    5 days ago

    Sandy Springs, United States My3Tech Full time

    Hello, Role: Need for a Sr. Analyst for a 3-month project (could get extended longer based on performance)Location: 100% remoteCAN WORK ON C2C ALSO.The main objectives for this analyst would be to support the following throughout the product development lifecycle:Provide/ Review analytics requirements, validate tagging specifications and perform data...

  • Analyst w/ Amplitude, ad-hoc, Snowflake, PXL Tagging

    4 days ago

    Sandy Springs, United States My3Tech Full time

    Hello, Role: Need for a Sr. Analyst for a 3-month project (could get extended longer based on performance)Location: 100% remoteCAN WORK ON C2C ALSO.The main objectives for this analyst would be to support the following throughout the product development lifecycle:Provide/ Review analytics requirements, validate tagging specifications and perform data...

  • Compliance Analyst Sr

    2 months ago

    Colorado Springs, CO, United States UCHealth Full time

    Description Position can be held in Colorado Springs or DenverSummary:Assists with administration of the organization's compliance program, policies and practices.Work Schedule:Full Time DaysResponsibilities:Oversees the work of Compliance Analysts to identify, assess and compile compliance and privacy risk areas as determined by regional and system...

  • Compliance Analyst Sr

    3 days ago

    Colorado Springs, CO, United States UCHealth Full time

    Description Position can be held in Aurora/Metro Denver and Colorado SpringsSummary:Assists with administration of the organization's compliance program, policies and practices.Work Schedule:Full Time DaysResponsibilities:Oversees the work of Compliance Analysts to identify, assess and compile compliance and privacy risk areas as determined by regional and...

  • Desktop Support Technician

    3 weeks ago

    Palm Springs, United States Gravity IT Resources Full time

    Job Title: Desktop TechnicianJob Type: Direct Hire Location: Palm Springs, California (On Site)Position Overview: This position offers an exciting opportunity for candidates eager to grow in healthcare IT applications, with a primary responsibility for addressing and resolving end-user issues escalated from the help desk in a leading healthcare system in the...

  • Sr. Technical Business Analyst

    2 months ago

    Coral Springs, United States ApTask Full time

    About Client: The client provides information technology (IT) services, including business outsourcing, infrastructure technology, and application services. The application service offered by the company includes application development, maintenance, and support. The markets served by the company are financial services and insurance, healthcare,...

  • Senior Analyst System Databases and Applications Integration

    2 weeks ago

    Altamonte Springs, United States AdventHealth Full time

    **All the benefits and perks you need for you and your family:** + Benefits from Day One + Paid Time Off from Day One + Career Development + Whole Person Wellbeing Resources + Mental Health Resources and Support **Our promise to you:** Joining AdventHealth is about being part of something bigger. Its about belonging to a community that believes in the...

  • Senior Analyst System Databases and Applications Integration

    3 weeks ago

    Altamonte Springs, United States AdventHealth Full time

    All the benefits and perks you need for you and your family: Benefits from Day One Paid Time Off from Day One Career Development Whole Person Wellbeing Resources Mental Health Resources and Support Our promise to you: Joining AdventHealth is about being part of something bigger. It’s about belonging to a community that believes in the wholeness...

  • Sr DOCSIS Engineer

    4 weeks ago

    Colorado Springs, Colorado, United States Excelacom Full time

    Job Summary:Excelacom is seeking a highly skilled DOCSIS Engineer to join our team. As a DOCSIS Engineer, you will be responsible for designing and implementing complex technology solutions for our clients. You will work closely with our team to decompose key business problems, identify value areas, and structure and implement solutions. You will also create...

  • Desktop Support Technician

    2 weeks ago

    Palm Springs, CA, United States Gravity IT Resources Full time

    Job Title: Desktop TechnicianJob Type: Direct Hire Location: Palm Springs, California (On Site)Position Overview: This position offers an exciting opportunity for candidates eager to grow in healthcare IT applications, with a primary responsibility for addressing and resolving end-user issues escalated from the help desk in a leading healthcare system in the...