Security Operations Center Analyst-Endpoint Security

Title : Security Operation Center Analyst 2

Location : Remote

Top 3 Skills

Endpoint Security

Incident Response

Engineering Security Protocols

Job Description

The Information Security Office (ISO), Security Operations Center (SOC) is at the forefront of the State of Maine defense against cyber threats. The position works to protect more than 20,000 devices on the Client network. This position will perform continuous monitoring of critical systems for the Client. The candidate will be a member of a team focused on endpoint detection and response, antivirus protection, endpoint investigations, and other endpoint security, engineering, and incident response activities. The position will also support the SOC Team Leads and the Security Operations Manager in adequately meeting and addressing the operational demands within the SOC.

Relevant Education:

Five years of information security experience, with a focus on Endpoint Security, Incident Response, and Security Engineering within an enterprise environment. The ideal candidate will have knowledge of Windows and Linux systems and their associated scripting languages, experience with AWS or Azure cloud environments, and will have worked with endpoint security platforms such as Microsoft Defender for Endpoint, FireEye, Crowdstrike, McAfee, or similar, and with vulnerability testing products such as Windows Defender TVM, Tenable Nessus, Rapid 7 InsightVM, Qualys, or similar. Experience with any of the popular SIEM platforms is also desired (Splunk, Azure Sentinel, Sumo Logic, LogRhythm, Elasticsearch, etc.

A four-year college degree in computer science or a related field with advanced study preferred; One or more relevant technical security certifications are a plus (GIAC, ISC2, CompTIA, EC Counsel, etc.)