Security Operations Center Analyst II

SPECTRAFORCE; Antioch (TN); On-site; USD 50,000 - 60,000; Full time

Job summary

Spectraforce is seeking a Security Operations Center Analyst II to join the SOC team in a 40-hour workweek, Mon-Fri. The role focuses on monitoring, analyzing, and responding to threats in a 24x7 environment, with mentoring duties for L1 staff and escalation handling.

Ideal candidates have 5+ years in security operations, strong networking and IDS/IPS knowledge, and hands-on experience with Splunk and security tooling. Office-based with potential travel may apply.

Qualifications

• 5+ years in a Security Operations Centre environment.
• Strong understanding of intrusion detection and network security.
• Experience with incident response and escalation processes.
• Familiarity with MITRE ATT&CK and industry best practices.

Responsibilities

• Lead analysis and investigation of security events in a 24x7 SOC.
• Monitor, research, assess, and analyze security incidents.
• Mentor L1 SOC analysts and serve as escalation point.
• Handle security alerts in Splunk and raise tickets.
• Correlate data across systems and prepare internal/client reports.
• Develop and update security policies and procedures.
• Stay current with threats and defensive techniques.

Skills

Networking knowledge

Incident response

Mentoring

SLA adherence

Security monitoring

Education

Bachelor's degree in engineering or higher preferred

Tools

Splunk

CrowdStrike

SCCM

BitLocker

Zscaler

Proofpoint

ServiceNow

Trend Micro

Okta

Azure / O365

Nexpose / InsightVM

Job description

Role Name: Security Operations Center Analyst II

Duration: Full-time

Shift: Mon - Fri, 40hrs/week

Job Description:

The Security Operations Center Information Security Analyst II will be part of the SOC Team. This center monitors, analysis and responds to infrastructure threats and vulnerabilities on a 24x7 basis

• Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24X7 SOC environment to immediately detect, verify, and respond swiftly to cyber threats, and remove false positive. Strong networking background.
• The analyst performs monitoring, research, assessment and analysis which requires demonstrable security incident response experience.
• Serve as a technical point of escalation and provide mentoring for L1 Security Operations Center (SOC) analysts.
• Handling security alerts on Splunk SIEM and Raise tickets based on the alerts.
• Follow ups with respective team to close the alerts, tickets.
• Analyze and assess security incidents and escalaten to appropriate internal teams for additional assistance.
• Responsible for investigating incidents, analyzing attack methods, researching new defense techniques and tools, developing security policy, and documenting procedures for SOC.
• Malware analysis and other attack analysis to extract indicators of compromise. Perform data security event correlation between various systems.
• Prepare reports, summaries, and other forms of communication that may be both internal and client facing.
• Maintain familiarity with industry trends and security best practices.
• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.
• Periodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.

Basic Qualifications (Minimum Required Experience, or Education, Knowledge/Skills/Abilities, Essential Physical Demands):

EDUCATION AND/OR EXPERIENCE:

• 5+ years working in the Security operations Centre.
• Bachelor's degree in engineering or higher preferred
• Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)
• Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)
• Knowledge of cutting edge threats and technologies effecting Web Application vulnerabilities and recent internet threats
• Exposure on Vulnerability assessment as well as penetration testing or forensic analysis fields are an advantage
• Experience working as part of a global team, spanning multiple time zones and cultures.

Certifications/Preferred Skills Desired

MACHINES, EQUIPMENT, AND SOFTWARE: Required: MS Office

Strongly Preferred: Cisco Network devices, Nexpose or Insight VM, Splunk, Crowdstrike, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365.

PHYSICAL DEMANDS AND WORKING CONDITIONS: Office work, possible international travel up to 5%

• For information on benefits, equal opportunity employment, and location-specific applicant notices, click here

At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.This position's pay range is $50000.00/Yearly - $60000.00/Yearly.