SOC Mid-Level Analyst

ECS; Richmond (VA); Remote; USD 120,000 - 145,000; Full time

Job summary

ECS is seeking a SOC Mid-Level Analyst to work remotely within a mature 24x7 Security Operation Center. You will ingest, correlate, normalize, and analyze event messages to rapidly identify and respond to IoCs.

The ideal candidate has 5+ years of log analysis experience, a Bachelor's degree or equivalent, and experience with SIEM and SOAR. This full-time role follows a Sunday-Thursday 12:00AM–8:00AM ET shift and offers SOC responsibilities remotely under Everforth ECS.

Qualifications

• Minimum of 5 years experience conducting analysis of log data in support of intrusion analysis or information security operations.
• Bachelor's degree or equivalent with relevant certifications.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.

Responsibilities

• Continuously monitors SIEM and on-premises infrastructure/cloud applications for security events to threats & intrusions.
• Participates with responding to and handling all critical incident activity.
• Assists with creating and tuning SOAR playbooks and automated workflows.
• Performs proactive threat hunting to identify and characterize new threats.

Skills

5+ years log analysis

IoC analysis

Threat hunting mindset

Education

Bachelor's degree or equivalent

Tools

SIEM tools

SOAR

Job description

ECS is seeking a

Job Description

ECS is seeking a SOC Mid-Level Analyst to work remotely.

ECS is seeking a Mid-Level SOC Analyst with demonstrated experience supporting the development of processes, procedures, and automations to rapidly ingest, aggregate, correlate, normalize, and analyze event messages to rapidly and assuredly identify and respond to Indicators of Compromise (IoC). The ideal candidate is a critical thinker and perpetual learner who is excited to solve some of our clients’ toughest challenges. To be successful the candidate must have experience working in a mature 24x7x365 Security Operation Center.

Shift schedule: Sunday-Thursday, 12:00AM - 8:00AM ET (subject to change)

Responsibilities Include

• Continuously monitors SIEM and on-premises infrastructure/cloud applications for security events to threats & intrusions, including:
• SIEM alert queue
• Phishing email inbox
• Intel feeds via email and other sources (i.e., US-CERT, MS-ISAC)
• Incident ticketing queue
• Participates with responding to and handling all critical incident activity. Ensure the execution of proper containment, remediation, and recovery activities.
• Assesses and documents lessons learned as part of post-incident review, such as unsuccessful controls, outdated procedures, or incomplete remediation actions.
• Coordinates with SIEM engineering to tune security events and alerts for improving alert fidelity.
• Assists with creating and tuning Security Orchestration and Automation (SOAR) playbooks and automated workflows.
• Performs proactive threat hunting to identify and characterize new emerging threats, vulnerabilities, and risks.
• Works closely with Cyber Threat Intel to provide information on detection patterns for new upcoming threats
• Compiles threat hunt reports as requested on any specific hunt/threat inquiry and disseminate to SOC leadership.

Conducts research and document events of interest within the scope of Cybersecurity.

Salary Range: $120,000 - $145,000

General Description Of Benefits

• Benefits — Everforth ECS

Required Skills

• Minimum of 5 years experience conducting analysis of log data in support of intrusion analysis or information security operations.
• Bachelors degree or equivalent with relevant certifications.
• Experience with two or more analysis tools used in a CIRT or similar investigative environment.
• Ability to build content in SIEM system.
• Ability to analyze and triage IoCs.

Desired Skills

• Strong analytical mindset with an open and engaging personality
• Cloud security, threat hunting, security operations
• Knowledge of the Cybersecurity Framework (CSF) and MITRE ATT&CK Framework
• Preferred Certifications (one or more):
• Certified Ethical Hacker (CEH)
• Certified Information System Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• CompTIA Security+
• Computer Hacking Forensic Investigator (CHFI)