CYBER SECURITY/SOC ANALYST

Staffing Solutions USA, Inc.; New York (NY); Híbrido; USD 110 000 - 150 000; Tempo integral

Resumo da oferta

Staffing Solutions USA, Inc. is seeking a Cyber Security/SOC Analyst for a hybrid role based in New York City. The role focuses on intrusion detection, threat monitoring, response, and cyber threat intelligence to protect the organization.

You will work with multiple departments to implement security initiatives and ensure compliance with standards. Extensive collaboration with junior analysts and ongoing program enhancements are expected.

Qualificações

• Bachelor’s Degree or higher in a related technical field is required.
• Experience with incident response and handling methodologies.
• Strong knowledge of OS, networking, and MS Active Directory.

Responsabilidades

• Investigate and analyze detections from diverse security tools in a 24/7 environment.
• Oversee configuration and management of SOC security tools to improve detection and response.
• Perform incident investigations and determine steps for further analysis.
• Develop and refine SOC processes and procedures to stay aligned with evolving threats.
• Stay informed on threats by analyzing attacker TTPs and security reports.
• Mentor junior analysts in detections and investigations.
• Analyze threats including malware and network forensics to enhance detection.

Conhecimentos

Security operations

Incident response

Threat monitoring

Threat intelligence

Team mentorship

Security controls

Network security

Formação académica

Bachelor’s Degree in Computer Information Systems, Computer Science, MIS, Engineering or related technical discipline

Equivalent work experience with cybersecurity certifications

Ferramentas

NGFW

EDR

NDR

TIP

SIEM

Azure

CASB

Firewalls / NGFW

Web application firewalls

Vulnerability scanners

Penetration testing tools

Descrição da oferta de emprego

SSUSA Job #1135: CYBER SECURITY/SOC ANALYST

Job Description

CYBER SECURITY/SOC ANALYST

One of our national clients is seeking a Cyber Security/SOC Analyst that will be responsible for overseeing and managing cybersecurity projects within the organization. This role requires a strategic thinker with strong leadership skills and a deep understanding of cybersecurity principles and practices. The successful candidate will work closely with various departments to ensure the successful implementation of security initiatives and compliance with industry standards. This position is a Hybrid position working in their NYC offices. This position will focus on Intrusion Detection, Threat Monitoring, Response, and Cyber Threat Intelligence to protect and maintain the overall security of the organization.

Key Responsibilities:

• Security Operations Monitoring: Investigate and analyze detections from a diverse set of security tools (NGFW, EDR, NDR, TIP, SIEM) within a high-availability, 24/7/365 operational environment to ensure proactive threat detection and continuous protection.
• Security Operations Management: Oversee the configuration, optimization, and management of security tools utilized by the SOC to enhance detection, response, and overall security posture.
• Incident Response: Conduct thorough investigations of detections escalated by junior analysts to evaluate the scope of the attack, identify affected systems, and determine the necessary steps for further analysis.
• Program Enhancement: Collaborate in the development and refinement of SOC processes and procedures to keep the SOC aligned with the ever-evolving threat landscape, ensuring operational efficiency and readiness.
• Threat Intelligence and Awareness: Stay informed on emerging and existing threats by analyzing attacker tactics, techniques, and procedures, and reviewing security event reports to proactively strengthen defenses.
• Mentorship and Guidance: Provide guidance and support to junior analysts in reviewing detections and incidents, ensuring they follow best practices for investigation and response.
• Threat Analysis: Perform analysis of threats, including malware analysis and network forensics, to uncover malicious activity and enhance detection capabilities.

Qualifications:

• Ability to develop specific proactive procedures for the detection of security breaches
• Strong working knowledge of incident response and handling methodologies
• Strong working knowledge in operating systems, networking, and MS Active Directory
• Good working knowledge of SaaS-based cloud application security and cloud platforms such as Azure
• Experience in collaborating with system and network administrators to help remediate the impact of identified risks and vulnerabilities at the platform level.
• Demonstrate conceptual, analytical and innovative problem-solving skills
• Ability to conduct independent research and analysis in the event of a security breach
• Identify issues, formulate a strategy, and proactively remediate security risks
• Ability to draw conclusions and make recommendations based on analysis and findings
• Self-starter who is a team player who embraces collaboration.
• Demonstrate knowledge of security controls for network, application, and operating systems.
• Knowledge and use of the MITRE ATT&CK framework
• Demonstrate interpersonal skills, including the ability to work effectively in a team environment.
• Capacity to work independently and willingness to seek advice/assistance from others.
• Security Incident Handling and Response and Threat Management
• Encryption/cryptography standards, protocols and best practices
• Strong knowledge on analyzing malicious payloads (malware/spyware)
• Strong knowledge on performing email investigations
• In-depth knowledge of various security technologies including:
• IDS/IPS
• EDR/NDR/XDR
• CASB
• Firewalls and next-generation firewalls (NGFW)
• Cyber threat intelligence feeds and databases
• Web application firewalls
• Vulnerability scanners and penetration testing tools
• Network security best practices

Qualifications:

• Ability to develop specific proactive procedures for the detection of security breaches
• Strong working knowledge of incident response and handling methodologies
• Good working knowledge of SaaS-based cloud application security and cloud platforms such as Azure
• Experience in collaborating with system and network administrators to help remediate the impact of identified risks and vulnerabilities at the platform level.
• Demonstrate conceptual, analytical, and innovative problem-solving skills
• Ability to conduct independent research and analysis in the event of a security breach
• Identify issues, formulate a strategy, and proactively remediate security risks
• Ability to draw conclusions and make recommendations based on analysis and findings
• Self-starter who is a team player who embraces collaboration.
• Demonstrate knowledge of security controls for network, application, and operating systems.
• Knowledge and use of the MITRE ATT&CK framework
• Demonstrate interpersonal skills, including the ability to work effectively in a team environment.
• Capacity to work independently and willingness to seek advice/assistance from others.
• Security Incident Handling and Response and Threat Management
• Encryption/cryptography standards, protocols, and best practices
• Strong knowledge on analyzing malicious payloads (malware/spyware)
• Strong knowledge on performing email investigations
• In-depth knowledge of various security technologies, including:
• Experience working in a 24/7 SOC environment
• Bachelor’s Degree in Computer Information Systems, Computer Science, MIS, Engineering or related technical discipline. Equivalent work experience in the Information Technology field will be considered, coupled with relevant Cyber Security certifications
• Minimum 3 years of direct information security experience within an Information Technology organization
• Relevant industry certifications preferred