SOC Cyber Detection & Response Analyst (Hybrid)

Executive Office of Technology Services and Security; Chelsea (MA); Hybrid; USD 64,000 - 87,000; Full time

Job summary

The Executive Office of Technology Services and Security (EOTSS) is seeking a Security Analyst I for the Cyber Detection and Response Team. The role focuses on incident triage, detection, response, and remediation within the TSS SOC, collaborating with engineers and MSPs to provide detection and containment of IT threats.

The position is based at 200 Arlington Street, Chelsea, MA, with a hybrid schedule combining in-office and remote days as needed.

Qualifications

• Knowledge of SIEM (Security Information and Event Management) Splunk preferred.
• TCP/IP, VLANs, computer networking, routing, and switching.
• IDS/IPS, penetration and vulnerability testing.
• Windows and Linux operating systems.
• Network protocols and packet analysis tools.
• EDR Tools Palo Alto Cortex preferred.
• Cloud computing (AWS/AZURE/GCP).
• Understanding of Proofpoint and other email security tools.

Responsibilities

• Managing day-to-day security monitoring, and IR activities, including SIEM monitoring and EDR usage.
• Assist in detection and incident response functions and participate in security exercises.
• Monitor and respond to anomalous Internet/Extranet/Intranet activity with threat intelligence.
• Assist in cybersecurity education and awareness initiatives for state government.
• Review third-party alerts to maintain situational awareness and test software updates.

Skills

SIEM Splunk

TCP/IP

VLANs

IDS/IPS

Windows OS

Linux OS

EDR Tools

Palo Alto Cortex

Cloud AWS/AZURE/GCP

Email security tools

Education

Bachelor's Degree in Computer Science or related field

Tools

Palo Alto Cortex

Tenable

Expanse

Job description

The Executive Office of Technology Services and Security (EOTSS) is seeking a Security Analyst I for the Cyber Detection and Response Team. The role focuses on incident triage, detection, response, and remediation within the TSS SOC, collaborating with engineers and MSPs to provide detection and containment of IT threats.

The position is based at 200 Arlington Street, Chelsea, MA, with a hybrid schedule combining in-office and remote days as needed.