Analyst, Security Operations Center

We are currently looking for an Analyst, Security Operations Center to join our growing Operations team! In this role, you will report directly to the Manager, Security Operations Center. You will manage event and information intake to include intelligence reports, monitoring ticket queues, investigating reported incidents, and interacting with other security and infrastructure groups as necessary. You will be part of a critical team on-call 24x7 to manage critical incidents. You will work shift-based hours, sometimes holding night shifts. 

As Analyst, Security Operations Center, your duties will include:

• Ability to work shift hours, including night shifts.
• Review incidents to assess their urgency and escalate incidents if necessary
• Triage alerts
• Correlate and analyze events and data to determine the scope of cyber security incidents
• Recognize attacker tactics, techniques, and procedures as potential indicators of compromise (IOCs) to improve monitoring, analysis, and incident response
• Assist in tuning SIEM and IDS alerting to reduce false positives, improve productivity, and improve detection capabilities
• Develop automation playbooks
• Provide prescriptive remediation guidance to IT and network teams
• Document incident responses with the detailed root cause and recommendations
• Provide 24x7 (on-call) support
• Monitor and manage/support all event sources
• Endpoint Protection Systems (EDR/XDR), and other security tools to monitor and manage security incidents
• Use the SIEM, SOAR, DLP tools, Cloud Posture Management, Endpoint Management, Endpoint Protection Systems (EDR/XDR), and other security tools to monitor and manage security incidents
• Participate in organizational projects, as required
• Ticket & Ticket Management