SOC Analyst I

Heartland Business Systems, LLC.; Plymouth (MN); On-site; USD 52,000 - 78,000; Full time

Job summary

Heartland Business Systems, located in the Midwest, is seeking an SOC Analyst I to monitor security events and assist with threat hunting in a managed security services environment. You will work with clients across industries, perform event correlation, incident documentation and escalation to determine potential impact, and help validate security incidents.

A strong customer service mindset is essential. Day-to-day tasks include supporting XDR/EDR, vulnerability scanning, SOP creation, and

Qualifications

• 1+ years in IT administration, help desk, or equivalent.
• Basic understanding of cybersecurity best practices.
• AAS or equivalent experience.
• Experience with security tools.
• Microsoft SC-900 within 6 months of employment.
• Microsoft SC-300 within 1 year of employment.
• Outcome-focused mindset and strong prioritization.
• Team player with professional demeanor.

Responsibilities

• Provides security event monitoring and analysis to identify critical cyber events for clients.
• Conduct research, analysis, and correlation across diverse data sets.
• Perform event correlation to gain situational awareness of attacks.
• Document and escalate incidents with history, status, and potential impact.
• Notify clients of suspected incidents and articulate progression.
• Work with customers to validate or resolve incidents and vulnerability compliance.
• Provide recommendations for system tuning and enhancements.
• Create basic analytic rules for automation approvals.
• Support SOC services including Managed XDR/EDR and vulnerability scanning.
• Characterize and analyze network traffic for anomalous activity.
• Participate in recurring customer status calls.
• Draft SOPs as directed.
• Participate in after-hours on-call rotation.

Skills

IT administration experience

Cybersecurity basics

Prioritization

Team player

Outcome-focused mindset

Professional attitude

Education

Associate of Applied Science (AAS) or equivalent experience

Microsoft SC-900

Microsoft SC-300

Tools

Security tools

Job description

Description

The Security Operations Center (SOC) Analyst I provides real time security monitoring and threat hunting in our Security Operations Center. This individual will have the opportunity to work with customers across many industries by providing managed security services such as XDR, SIEM, vulnerability scanning, firewall, and end point management. This position will also provide exceptional customer service by assisting customers in identifying potential security incidents, attack sources, root causes and/or threat actors.

Roles and Responsibilities/ Essential Functions:

• Provides security event monitoring and analysis to identify critical cyber security events for clients.
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
• Perform event correlation using information gathered from a variety of sources to gain situational awareness and determine the effectiveness of an observed attack.
• Document and escalated incidents (including event’s history, status, and potential impact for further action), that may cause ongoing and immediate impact to the environment.
• Notify clients of suspected cyber incidents and articulate the event’s history, status, and potential impact of further action.
• Work with customers to validate/resolve computer security incidents and vulnerability compliance.
• Provides recommendations for system tuning and enhancements.
• Create basic Analytic rules for automation for approval.
• Provide basic support for SOC services including but not limited to Managed XDR, Managed EDR, Managed Security Awareness Training and Managed Vulnerability Scanning.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Perform recurring customer status calls.
• Draft Standard Operating Procedures (SOPs) as directed.
• Participate in an after-hours on-call rotation.

Requirements

How to qualify:

• 1+ years working in Information Technology Administration, help desk or other equivalent experience.
• Basic understanding of cybersecurity best practices.
• Associate of Applied Science (AAS) or equivalent experience
• Experience with security tools
• Microsoft SC-900 (Within 6 months of employment)
• Microsoft SC-300 (Within 1 year of employment)
• Maintain an outcome focused mindset
• Have strong prioritization skills
• Always be a team player
• Carry a professional attitude and respectful demeanor

Why HBS?

Heartland Business Systems is one of THE LARGEST technology VARs or Value-Added Resellers in the Midwest. Anything that happens with computers – we do it! We PRIDE ourselves on our Core Values of:

Performance – HBS is driven to achieve exceptional results in all aspects of our business.

Respect – HBS Team Members demonstrate personal integrity and professionalism when dealing with all internal and external contacts.

Innovation – HBS is passionate to serve our internal and external customers with innovative solutions to enhance their success.

Development – HBS is committed to developing ourselves and each other in ways that support and improve the performance of ourselves and our business.

Excellence – HBS takes great pride in all we do and strive for excellence always.

What you can expect from HBS:

• Competitive Compensation Package (May include but not limited to: Bonus, Incentive, Commission, Fair Wage, Retirement Plans, Benefits with HSA Compatible Plans)
• Growth Opportunities
• Community Involvement
• Personal Development
• Employee and Family Celebrations
• Green Initiatives
• Personal Time Off
• Work Life Balance
• Recognition and Awards

Day in and day out, you will be a part of a collaborative, innovative and award-winning team that will make you a better professional. Choose HBS today!

Heartland Business Systems is an Equal Opportunity Employer - Including Disabled and Veterans.