SOC Analyst

Position Objective The SOC Analyst will be expected to implement, monitor, and support the security tool platforms that the organization and our clients use. This position will primarily support reactionary responses to security related alerts and the setup of clients within the security platforms.

This position will require working with the existing Managed Teams in order to ensure proper event/incident identification as well as its legitimacy. Keeping clients, users, and networks secure is the top-most mindset a successful candidate should have. Responsibilities

Respond, mitigate, and/or remediate (with high confidence) security-related events or incidents that are sourced from iVenture’s security platforms

Work with customers over the phone, or in person to help them understand the received security event/Incident and work towards mitigation and/or remediation

Onboard clients into the iVenture security platforms and ensure that full coverage for the organization is achieved and maintained

Participate in ad-hoc, random security-related events and incidents to assist the Managed Services Teams, including those received during pager rotations

Perform vulnerability remediation while obtaining necessary business-related understanding to ensure success of remediation and to determine and communicate any impact to the organization

Gain competency and mastery on iVenture’s security platforms to act as the backup subject matter-expert (SME) for the organization

Provide feedback for position and process enhancements to the direct supervisor

Perform recurring security platform health checks to ensure all monitoring systems and devices are healthy and accurate coverage is observed

Assist Managed Teams with security assessments

Follow any internal or client-facing change management procedures that may involve this position’s activities

Work with internal development and automation team to improve the security tool stack installation method, monitoring, and reporting.

Conduct security research that is related to security-related events and/or ad-hoc events alongside Managed Services Teams.

Stay on top of emerging security trends and best practices (SANS, CIS, MITRE, CISA, REDDIT, KREBS)

Review vendor security bulletins and ensure that proper awareness is achieved for mitigation and/or remediation.

Participate in organizational (internal) Incident Response table-top exercises

Participate on the organizational (internal) Incident Response Team.

Review reports and escalate any findings for additional correction

Attend and participate in professional and technical training opportunities and share key learning points for individual and organizational improvement

Produce, maintain, and update technical and training documentation

Perform other duties as required and requested by the Chief Information Security Officer

Key Metrics

Documentation for areas of expertise and daily tasks.

Adherence to documented SLAs Qualifications

Bachelor’s Degree, business related field preferred, or equivalent experience (Preferred)

At least 3 years with IT Support Experience

• CompTIA Security+ preferred

Experienced with networking topologies and a firm understanding of intermediate networking concepts

Must have strong analytical and problem-solving skills

• Be detail-oriented
• Able to work well under pressure

Have excellent communication skills to collaborate with team members and management Behavior

Profile Attributes

High standards of accuracy and quality, high attention to detail

Be able to handle multiple, simultaneous projects/tasks; fast paced

Provide clear, direct, authoritative direction to others

Originally posted on Himalayas