Apply on Employer Site

S-RM · 2 months ago

Senior Cybersecurity Analyst (SOC)

United States

Full-time

Remote

Mid, Senior Level

3+ years exp

S-RM is a global intelligence and cyber security consultancy, and they are seeking a Senior Cybersecurity Analyst (SOC) to enhance their managed detection and response services. The role involves leveraging security infrastructure and tools to deliver security outcomes, managing incidents, and mentoring junior analysts in a fast-paced cyber environment.

Business IntelligenceCyber Security

No H1B

Responsibilities

Contribute to day-to-day SOC team-related activities, ensuring efficient monitoring, detection, and response to security threats across our clients’ estates

Continuously monitor and analyze security alerts from EDR, SIEM and other security tools to detect suspicious activities or potential threats

Conduct investigations and respond to security incidents, executing containment, mitigation, and remediation steps as necessary

Use expertise to tune detection rules, automate workflows, and improve incident detection accuracy

Perform in-depth log analysis from firewalls, endpoint protection platforms, and other solutions to investigate complex incidents

Ensure all incidents are thoroughly documented, including timelines, analysis, mitigation steps, and lessons learned, and deliver regular reports to stakeholders

Act as second line escalation and support to the on-shift SOC Analysts in our 24x7 SOC team

Support onboarding and service request activity for our US MDR clients

Proactively search for indicators of compromise (IoCs) and advanced threats within the environment, utilizing both automated tools and manual analysis

Stay up to date on the latest cybersecurity threats, vulnerabilities, and attack techniques, and integrate threat intelligence into detection and response efforts

Provide guidance and mentorship to junior SOC analysts, fostering skill development and ensuring adherence to security best practices

Collaborate with the SOC team to develop and implement SOC strategies, improve processes, and introduce new technologies to strengthen our clients’ security posture

Collaborate with SOC analysts, security engineers, and IT teams to ensure seamless operation of security tools and alignment with broader cybersecurity practices

Identify areas for improvement in security monitoring and response capabilities, proposing and assisting with implementing new solutions where appropriate

Assist with onboarding and configuring SOC services and technology for new customers

Work closely with other cyber security service lines to ensure seamless integration of SOC operations with our broader cybersecurity initiatives and business units, especially Incident Response

Participate in and contribute to internal technical development initiatives, enhancing our tools, processes, and overall incident response capabilities

Qualification

EDR expertiseSIEM proficiencyIncident responseTeam leadershipCybersecurity certificationsThreat detectionLog analysisInvestigative mindsetCommunication skillsCustomer-focused

Required

A Bachelors or Masters degree in a relevant subject, for example cybersecurity, computer science

3+ years of experience in a SOC or cybersecurity operations role, with demonstrated team leadership/supervisory experience

Strong understanding of EDR and SecOps toolsets - with experience configuring and leveraging these tools for incident detection and response

Experienced in mentoring junior SOC analysts, with good communication and team-building skills

Comfortable in client-facing situations and able to discuss cybersecurity issues in customer-friendly language

An investigative mindset, comfortable solving problems with limited information and guidance and curious to learn

Dependable

Demonstrable knowledge of cyber threat actors, and their tactics, techniques, and interest in cybersecurity matters, security monitoring and threat detection techniques

Clear and concise communication skills, with the ability to work effectively across teams; able to communicate technical findings for a non-technical audience in a professional setting

Permission to work in USA by the start of their employment

Preferred

Relevant industry certifications are advantageous, including any of the following or evidence of working towards attaining these: Blue Team, CISSP, Security+