Job Summary
We are seeking an experienced Security Analyst to support Security Operations Center (SOC) activities, including cybersecurity monitoring, incident detection, investigation, and response. The role involves monitoring security alerts, analyzing potential threats, coordinating incident response, and supporting the protection of enterprise IT systems. The ideal candidate will have at least 5 years of experience in cybersecurity operations, incident management, and security monitoring within a fast-paced environment.
Key Responsibilities
- Provide security monitoring, analysis, and incident response support for Security Operations Center (SOC) operations.
- Monitor, investigate, and respond to cybersecurity events, alerts, and incidents affecting enterprise IT systems.
- Analyze security alerts, identify potential threats, and take appropriate actions to protect IT assets.
- Document, update, and manage security events and incidents within the SOC ticketing system.
- Follow established SOC processes and operational procedures for incident analysis, escalation, and remediation support.
- Support security engineers and IT support teams during cybersecurity alerts, events, and incidents.
- Provide phone and email support to agencies and external partners during security incidents.
- Assist with troubleshooting and investigation of security events reported to the SOC.
- Support preliminary forensic activities and incident investigation processes.
- Document changes, emerging trends, and recommendations related to cybersecurity tools, systems, and solutions.
- Coordinate and share security information with internal security teams and external partners.
- Provide feedback to SOC management and security engineers regarding existing and new security use cases.
- Support SOC metrics, reporting, and operational communications.
- Manage and support SOC video screens, monitoring displays, and related systems.
- Provide off-hours, on-call, and ad-hoc shift support as required.
- Maintain current knowledge of cybersecurity technologies, tools, threats, and industry practices.
Required Qualifications
- Minimum 5 years of experience in cybersecurity, information security, or Security Operations Center (SOC) operations.
- Minimum 5 years of experience monitoring, analyzing, and responding to cybersecurity events, alerts, and incidents.
- Hands-on experience with security incident investigation, escalation, and remediation support.
- Experience following SOC processes and security incident response procedures.
- Experience using security monitoring tools and incident ticketing systems.
- Strong understanding of cybersecurity threats, vulnerabilities, and IT security operations.
- Experience troubleshooting security events and supporting incident investigation.
- Knowledge of preliminary forensic processes and security event analysis.
- Strong analytical, problem-solving, and documentation skills.
- Excellent written and verbal communication skills.
- Ability to work in a fast-paced environment with aggressive timelines and provide off-hours support when required.
Core Technical Skills
- Security Operations Center (SOC)
- Cybersecurity Monitoring and Incident Response
- Security Event and Alert Analysis
- Threat Detection and Investigation
- Incident Escalation and Remediation
- Security Incident Documentation and Ticketing
- Preliminary Digital Forensics
- SOC Reporting and Metrics
- Security Operations Procedures
- Cybersecurity Tools and Technologies