SOC Engineer

TechDigital Group; Bellevue (WA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Security Operations Center (SOC) Analyst to join their dynamic team. This role requires expertise in maintaining a highly available operational environment, strong analytical capabilities, and effective communication skills. You will be responsible for analyzing security incidents, creating automations for security operations tools, and ensuring compliance with industry standards. If you're passionate about cybersecurity and eager to tackle complex challenges in a fast-paced environment, this opportunity is perfect for you. Join a forward-thinking company that values innovation and excellence in security operations.

Qualifications

• Experience in a 24x7x365 Enterprise Operational Environment.
• Strong analytical skills and attention to detail.

Responsibilities

• Gather and analyze data for incidents related to confidentiality and integrity.
• Create automations for SIEM/SOAR tools.

Skills

Critical thinking

Data analysis

Communication skills

Incident response standards

Security concepts knowledge

Automation for SIEM/SOAR

Metrics and reporting

Analytical skills

Problem-solving

Education

Industry-standard certifications (e.g., CISSP)

Tools

SIEM tools

SOAR tools

Azure Sentinel

Cloud infrastructures (Azure/AWS)

Job description

Must have experience:

1. Experience in Highly available 24x7x365 Enterprise Operational Environment
2. Must have strong critical thinking and analysis skills.
3. Must be a strong communicator both verbally and through text.
4. Effectively gather and analyze data for evidence of a loss of Confidentiality, Integrity, and Availability.
5. Mature understanding of industry accepted standards for incident response actions and best practices related to SOC operations.
6. In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, and incident management.
7. Should have experience creating automations for SIEM/SOAR tools and general security operations.

Proven success in working SOC function/team, including (but not limited to):

1. Experience creating and maintaining metrics, reporting and SLAs
2. Security operations experience with operating systems, cloud infrastructures and services (Azure/AWS) and customer-facing web applications
3. Familiarity or experience with Intelligence Driven Defense, Cyber Kill Chain methodology, as well as the NIST and MITRE Telecommunication & CK framework[s].
4. Strong analytical skills and attention to detail with thorough documentation skills.
5. Experience with enterprise architecture and infrastructure including, but not limited to servers, network appliances, databases, and system administration/management.
6. Ability to research, analyze, and resolve complex problems with minimal supervision and escalate issues as appropriate
7. Experience with a SIEM and a SOAR such as Azure Sentinel is required.
8. Industry-standard certifications such as SANS Certified Incident Handler, Malware Reverse Engineer, Forensic Investigator, Intrusion Analyst, or CISSP are valued.