SOC Analyst

Role: Security Operations Center Analyst ( SOC Analyst),

Location : NY/NJ/CT( Remote)

Duration : Full Time

Job Requirements

• Manage incidents and tickets for SOC customers.
• Communicate results of investigations to customers and log responses and time in Connect Wise.
• Work with Security and Network engineering teams to escalate incidents and support.
• Continuously update documentation and support information for customers on Confluence.
• Provide feedback to SOC Manager to improve process and procedures for SOC.
• Meet regularly with peers to discuss customers and incidents.
• Attend virtual training for security platform as required.
• Provide hand off of active incidents between working shift.
• Support managed services for SOC clients by monitoring SIEM and handling support tickets related to security devices including Firewalls, AV, etc.
• Serving as an escalation point for technical support related to security incidents, tools, and applications.
• Assist with knowledge transfer of the ticket resolution while escalating to Tier 2/3 analysts as needed.
• Assist in developing security vulnerability and security gap analysis reports for clients.
• Assist in researching and fact finding during the exploratory phase of a security gap analysis or vulnerability assessment.
• Working with a growing team of SOC Support engineers and assist with troubleshooting and ticket resolution.
• Assist in the development of IR handbooks and Cortex XSOAR Playbooks.
• Provide feedback and continuous optimization of customer Paybooks.
• Assist the NOC and Network teams with security related issues.
• Respond to security related events and assist in remediation efforts as required.
• Manage all security situations in a professional and courteous business manner with an emphasis on customer satisfaction, while keeping the customer abreast of expectations, problem status and completion.

Qualifications

• 3+ Years providing IT support to end users.
• Excellent written and verbal communications skills.
• Experience managing end point security agents.
• 1 year experience as a Security/Cyber/Network Analyst
• Experience
• Direct experience in Security Operations Center work, Network Event Analysis, Threat Analysis

and/or Intelligence Analysis

• Knowledge of various security methodologies and processes, and technical security solutions

(firewall, packet analysis, SIEM and intrusion detection systems)

• Experience with XDR/EDR security tools (Palo Alto Cortex XDR and Cisco XDR preferred)
• Experience SOAR tools (Cisco XDR, Cortex XSOAR preferred)
• Ability to analyze endpoint, network, and application logs
• Knowledge of common Internet protocols and applications.

Experience with scripting languages (Python, Bash, PowerShell, etc preferred but not required)

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.