SOC Analyst, US SOC

Thrive; Tampa (FL); Hybrid; USD 55,000 - 85,000; Full time

Job summary

Thrive in Tampa, FL is seeking a SOC Analyst 1 to join ourSecurity Operations Center. The role involves monitoring security events from multiple sources, investigating intrusions, and helping protect 400+ clients in the northeast with proactive threat detection and response.

The ideal candidate has a passion for information security, strong networking knowledge, and the ability to work in a team. You will follow Thrive’s security standards and contribute to ongoing security improvements.

Qualifications

• Ability to analyze a large amount of data from various sources and use this information to solve complex problems.
• Knowledge of computer networking and security fundamentals.
• Understanding of vulnerability discovery and analysis processes.
• Familiarity with operating system internals (Windows, Linux/Unix).
• Experience with security event monitoring and incident response concepts is desirable.
• Strong written and verbal communication skills.
• Knowledge of Windows/Linux system calls and APIs.
• Understanding of antivirus technologies.
• Basic knowledge of programming languages.
• Familiarity with malware file structures (OLE, RTF, PDF, EXE).

Responsibilities

• Perform security event monitoring using SIEM from multiple sources.
• Investigate intrusion attempts and differentiate false positives from true intrusions.
• Proactive monitoring and response to known and emerging threats.
• Assist with security planning and best-practice implementations for 400+ clients in the northeast.
• Analyze data from SOC/SIEM to determine if further analysis is needed.
• Stay updated on security events and techniques to keep clients protected.
• Provide security awareness training to help end users stay safe.
• Understand and apply Thrive’s security standards and procedures.
• Communicate network security issues clearly to peers and management.

Skills

Computer Networking & Security

Vulnerability Discovery and Analysis

Operating System Internals

TCP/IP & Applications Protocols

Written and Verbal Communication

Windows/Linux System APIs

Anti-Virus Knowledge

Programming Languages

Programming basics

Malware file structures

Tools

SIEM

EDR

IDS/IPS

Job description

Position is hybrid in the Tampa, Fl office

About us:

Thrive is an innovative technology solutions provider focused on Cyber Security, Hybrid Cloud, Global Network Management, Disaster Recovery and traditional Managed Services. Our corporate culture, engineering talent, customer-centric approach, and focus upon NextGen services help us stand out among our peers. Thrive is on the look-out for individuals who don’t view their weekdays spent at ‘a job’ but rather look to develop valuable skills that ignite their passion and lead to a CAREER. If you’re attracted to a work hard, play hard environment and seek the guidance, training and experience necessary to build a lucrative career, then welcome to THRIVE!

Position Overview

With a growing client base, Thrive is continuing to build out its security team. We are looking to hire a SOC Analyst 1 to take a role within our Security Operation Center assist with the continuously monitor and improve our customers' security posture while preventing, detecting, analyzing, and responding to cybersecurity incidents utilizing technology and well-defined processes and procedures. The ideal candidate will have a passion for information security and will value what a properly managed Security monitoring solution can bring to our client needs.

Primary Responsibilities

• Perform security event monitoring using Security Information and Event Management (SIEM) from multiple sources, including but not limited to, events from network and host-based intrusion detection/prevention systems, network infrastructure logs, systems logs, applications, and databases.
• Investigate intrusion attempts, differentiate false positives from true intrusion attempts, and perform analysis of exploits.
• Proactive monitoring and response of known and/or emerging threats.
• Carry out Thrive’s information security strategy both internally and externally for 400+ clients in the northeast.
• Analyze data from our SOC and SIEM and determine if further analysis is needed.
• Work within Thrive’s security standards and best practices and recommend future enhancements.
• Manage our clients’ security awareness training to help their end users be as safe as possible.
• Analyze vulnerability scans and determine remediation steps
• Stay abreast of security events and techniques to keep our clients protected.
• Build awareness through training and education.
• Has knowledge of the following systems and technologies:
• SIEM (Security Information and Event Management)
• TCP/IP, computer networking, routing, and switching
• IDS/IPS, penetration and vulnerability testing
• Firewall and intrusion detection/prevention protocols
• Windows, UNIX, and Linux operating systems o Network protocols and packet analysis tools
• EDR, Anti-virus, and anti-malware
• Content filtering
• Email and web gateway.
• Understanding of cybersecurity threats, and experience with incident response standards and procedures.
• Demonstrates comprehension of good security practices
• Professional experience in a system administration role supporting multiple platforms and applications
• Ability to communicate network security issues to peers and management

Qualifications

• Ability to analyze a large amount of data from various sources and use this information to solve complex problems and make good decisions. Must be able to work effectively in a team environment and collaborate within the team and other stakeholders.
• Computer Networking & Security
• Vulnerability Discovery and Analysis
• Operating System Internals
• Familiarity with TCP/IP network protocols, application layer protocols (e.g., HTTP, SMTP, DNS, etc.).
• Excellent Written and Verbal Communication Skills Preferred Skills:
• Knowledge of common Windows and Linux/Unix system calls and APIs
• Understand Anti-Virus
• Knowledge of programming languages.
• Knowledge of internal file structures for file formats commonly associated with malware (e.g., OLE, RTF, PDF, EXE, etc.)