InterBase Corporation ยท 1 day ago
Security Operations Center Analyst
Maximize your interview chances
ConsultingEnterprise Resource Planning (ERP)
Insider Connection @InterBase Corporation
Get 3x more responses when you reach out via email instead of LinkedIn.
Responsibilities
Proactively search for active intrusions in the SCDOR environment, recognizing potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information
Work closely with escalation points to close out complex investigation
Conducting holistic, investigative analysis and rating the risk associated with observed activity
Review investigation escalations from SOC Analysts to ensure accurate analysis and provide advice/mentorship
Refine and develop dashboards, queries and reports to continuously improve security situational awareness
Maintain SOC documentation, procedures, processes and hardware and software inventory detail
Demonstrate a sound understanding of security technologies and their function within a networked environment
Adhere to corporate information security guidelines and promote information security among coworkers
Develop reports (manual and automated) to support the development, collection, and reporting of Quality Assurance and Performance metrics
Performs other duties and special projects as assigned
Demonstrate highly technical thinking and knowledge, inspire confidence and credibility within a team
Time management on multiple investigations, prioritizing
Appetite to develop an understanding of most investigations, cyber threats and computer forensics
Taking control of high-pressure situations and the attention to detail to precisely find the source
A good team ethos, drive and be a self-starter
The ability to work unsupervised and under pressure
Excellent verbal and written communication skills
Provide feedback to team regarding product issues, enhancements and new features
Ability to ask pertinent questions of others
Proactively seek to identify, communicate and implement process related improvements
Effectively manage multiple tasks and activities concurrently and able to provide periodic status updates to key stakeholders
Collaborate extensively with peers and management to resolve client issues while actively contributing to a growing knowledge network that improves the effectiveness of our team and the information available to our clients
Prioritize numerous issues of varying severity, and effectively manage the resolution of all issues within accepted service levels. This includes ownership of the data entered into the Helpdesk system and appropriately updating both client and appropriate employees of status of all issues on a timely basis
Good customer skills, be attentive to detail, and responsive to customer tickets
Performs other duties and special projects as assigned.
Qualification
Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.
Required
CURRENTLY EMPLOYED AS A SOC 2 or SOC 3 ANALYST
CURRENTLY USING SOAR AND SIEM TECHNOLOGY
RISK AND VULNERABILITY ASSESSMENTS
INCIDENT MANAGEMENT
SECURITY INFORMATION EVENT MANAGEMENT (SIEM) TUNING OF OFFENSES, ALERTS
EXCELLENT WRITTEN AND VERBAL COMMUNICATIONS SKILLS
THREAT HUNTING
ABILITY TO USE INDUSTRY LEADING SECURITY TOOLS
DEMONSTRATE KNOWLEDGE OF INFORMATION SECURITY PRINCIPLES AND PRACTICES
KNOWLEDGE OF COMMON RISKS AND THREATS FOR NETWORKING, DATABASES, SYSTEMS, CLOUD AND WEB OPERATIONS
Seven (7) years of experience in security information technology systems or related area, with a minimum of 5 years utilizing SIEM or SOAR technology.
Preferred
IRS Safeguard Computer Security Evaluation Matrix (SCSEM)
Forensics
Experience in projects involving PCI/NIST security implementations and/or audits.
Windows Security, including Cloud
Wireshark
SIEM tuning of log sources
SIEM systems development/configuration
Penetration Testing
Tenable Security Center Administration
OWASP Top 10 remediation techniques
Preferred Industry Certifications in field.
Cloud Certifications
Microsoft Certifications, Azure, Security related
GCIH, GCTI, GCCC, GCWN, GSEC, CEH, GCIA, GCFA, GCFE, GREM, CCIM, CFCE, CCE, CIFI, CHFI, CCNA, CCNA Cyber Ops
IBM Certified Associate Analyst - Security QRadar SIEM
Company
InterBase Corporation
InterBase Corporation is a global information technology solutions and services company.
Funding
Current Stage
Growth StageCompany data provided by crunchbase