Security Operations Center Analyst II — Antioch, TN

Role Name: Security Operations Center Analyst II

Location: Antioch, TN

Work Environment: Onsite

Duration: Full-time

Shift: Mon - Fri, 40hrs/week

Job Description:

The Security Operations Center Information Security Analyst II will be part of the SOC Team. This center monitors, analysis and responds to infrastructure threats and vulnerabilities on a 24x7 basis

• Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24X7 SOC environment to immediately detect, verify, and respond swiftly to cyber threats, and remove false positive. Strong networking background.

• The analyst performs monitoring, research, assessment and analysis which requires demonstrable security incident response experience.

• Serve as a technical point of escalation and provide mentoring for L1 Security Operations Center (SOC) analysts.

• Handling security alerts on Splunk SIEM and Raise tickets based on the alerts.

• Follow ups with respective team to close the alerts, tickets.

• Analyze and assess security incidents and escalate to appropriate internal teams for additional assistance.

• Responsible for investigating incidents, analyzing attack methods, researching new defense techniques and tools, developing security policy, and documenting procedures for SOC.

• Malware analysis and other attack analysis to extract indicators of compromise. Perform data security event correlation between various systems.

• Prepare reports, summaries, and other forms of communication that may be both internal and client facing.

• Maintain familiarity with industry trends and security best practices.

• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.

• Periodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.

Basic Qualifications (Minimum Required Experience, or Education, Knowledge/Skills/Abilities, Essential Physical Demands):

EDUCATION AND/OR EXPERIENCE:

• 5+ years working in the Security operations Centre.

• Bachelor’s degree in engineering or higher preferred

• Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)

• Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)

• Knowledge of cutting edge threats and technologies effecting Web Application vulnerabilities and recent internet threats

• Exposure on Vulnerability assessment as well as penetration testing or forensic analysis fields are an advantage

• Experience working as part of a global team, spanning multiple time zones and cultures.

Certifications/Preferred Skills Desired

• Certifications preferred: CEH

MACHINES, EQUIPMENT, AND SOFTWARE: Required: MS Office

Strongly Preferred: Cisco Network devices, Nexpose or Insight VM, Splunk, Crowdstrike, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365.

PHYSICAL DEMANDS AND WORKING CONDITIONS: Office work, possible international travel up to 5%

Applicant Notices & Disclaimers

• For information on benefits, equal opportunity employment, and location-specific applicant notices, click here

At hQfBU23bFwNz, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.This position's pay range is $50000.00/Yearly - $60000.00/Yearly.