Senior SOC Analyst - Threat & Incident Response

BDO USA; Fort Lauderdale (FL); Sur place; USD 60 000 - 95 000; Plein temps

Résumé du poste

BDO is seeking a SOC Engineer to join the Cyberteam in the Security Operations Center. You will respond to security events, analyze threats, and guide containment and remediation actions.

The role emphasizes monitoring, incident analysis, and improving detection capabilities. You will work with Azure/AWS cloud environments, SIEM/EDR platforms, and various network defense tools, contributing to playbooks and postmortem analyses.

Qualifications

• Three or more years in infosec, cybersecurity, system or networking.
• Three or more years of experience with network protocols, configurations or IT operations.
• Two or more years of cloud experience (Azure/AWS).
• Two or more years with EDR or SIEM platforms.
• Experience with help desk ticketing systems and service desk tools.

Responsabilités

• Monitors security event platforms and follows incident playbooks for first response and triage.
• Performs network monitoring and intrusion analysis using IDS/IPS, firewalls and HBSS.
• Develops improvements for monitoring rules based on insights.
• Creates regular reports for Security Management Team.
• Assists in on-call rotation and runbook updates.
• Documents statistics and contributes to playbooks.
• Stays updated on threats using public cyber resources.
• Participates in postmortems and incident containment efforts.
• Other duties as required.

Connaissances

EDR/SIEM

Incident response

Threat analysis

Windows/Linux

Network monitoring

Troubleshooting

Formation

High School Diploma or GED

Bachelor’s Degree in IT/Cybersecurity/CS

Outils

Microsoft Sentinel

Wireshark

IDS/IPS tools

Firewall troubleshooting

Windows/Linux

TCP/IP

Description du poste

BDO is seeking a SOC Engineer to join the Cyberteam in the Security Operations Center. You will respond to security events, analyze threats, and guide containment and remediation actions.

The role emphasizes monitoring, incident analysis, and improving detection capabilities. You will work with Azure/AWS cloud environments, SIEM/EDR platforms, and various network defense tools, contributing to playbooks and postmortem analyses.