Security Operations Center Analyst

Diligente Technologies; San Jose (CA); On-site; USD 80,000 - 100,000; Part time

Job summary

A technology solutions provider in California is looking for a SOC Analyst to monitor and respond to cybersecurity incidents. The ideal candidate will have a Bachelor's in IT or related field, 2+ years in a SOC role, and familiarity with tools like SIEM and EDR. Responsibilities include analyzing security alerts, documenting incidents, and collaborating with teams to enhance security posture.

Qualifications

• 2+ years of experience as a SOC analyst/executive.
• Willing to work in a 24/7 environment.
• Motivated to work in a fast-paced environment and handle multiple tasks simultaneously.

Responsibilities

• Monitor security alerts and events using security tools.
• Conduct initial triage and analysis of security incidents.
• Respond to security incidents by following established incident response protocols.
• Document and track incidents in the ticketing system.
• Collaborate with L2 analysts to investigate complex security threats.

Skills

Strong verbal and written communication skills

Excellent problem-solving skills

Basic understanding of networks

Good knowledge of MS Windows

Knowledge of Unix operating systems

Education

Bachelor’s degree in computer science, Information Technology, or related field

IT-related certifications (e.g., CompTIA A+, CEH, Security+)

Tools

SIEM tools (Preference Splunk, DEVO)

EDR tools (Preference SentinelOne EDR)

Job description

Overview

A Security Operations Center or SOC is an Organizational or Business Unit operating at the center of Security operations to manage and improve an organization’s overall security posture. Its primary function is to detect, analyze and respond to cybersecurity events, including threats and incidents, employing people, process and technology. Teams are responsible for managing security infrastructure. There are several different roles and responsibilities within SOC, from a tier 1 analyst to specialized roles like threat hunters.

Key Responsibilities

• Monitor security alerts and events using security tools.
• Conduct initial triage and analysis of security incidents and work on containment.
• Respond to security incidents by following established incident response protocols.
• Document and track incidents, findings, and remediation actions in the ticketing system.
• Collaborate with L2 analysts to escalate and investigate complex security threats.
• Familiar with SIEM and handling alerts. (Preference Splunk, DEVO)
• Have a good understanding of EDR and how to handle alerts and remediate them. (Preference SentinelOne EDR)
• Assist in the deployment and maintenance of security solutions (e.g., antivirus, EDR).
• Stay informed about the latest security threats, vulnerabilities, and industry best practices.
• Take instructions and convert them into SOPs.
• Participate in regular training to enhance skills in security and incident response.
• Create and maintain documentation for security incidents, analysis findings, and response procedures. Prepare reports and present findings for the next level of support.
• Coordinate with core security team and regulatory bodies for compliance.

Qualifications and Required Skills

• Bachelor’s degree in computer science, Information Technology, or related field; IT-related certifications (e.g., CompTIA A+, CEH, Security+) are a plus.
• 2+ years of experience as a SOC analyst/executive.
• Strong verbal and written communication skills.
• Excellent problem-solving skills.
• Basic understanding of networks; good knowledge of MS Windows and Unix operating systems.
• Willing to work in a 24/7 environment, motivated to work in a fast-paced environment and handle multiple tasks simultaneously.
• Good understanding of operational frameworks like ITIL and operations processes.

Employment and Location

• Job function: Information Technology
• Industries: IT Services and IT Consulting and Semiconductor Manufacturing
• Employment type: Contract
• Seniority level: Mid-Senior level