UltraViolet Cyber ยท 1 month ago
Senior Cyber Security (SOC) Analyst
UltraViolet Cyber is a leading platform-enabled unified security operations company providing a comprehensive suite of security operations solutions. They are seeking an experienced Security Analyst to manage security incidents, monitor and analyze security events, and recommend effective mitigation strategies. This role involves working with cutting-edge security tools in a dynamic environment.
ComputerInformation TechnologyNetwork Security
Responsibilities
Continuous Monitoring & Alert Triage: Actively monitor and analyze security events, network traffic, and alerts generated by the SIEM (Security Information and Event Management) platform and other security tools in a 24x7 environment
Incident Qualification: Perform initial investigation and analysis to determine if an alert is a true positive incident or a false positive; promptly escalating validated security incidents to senior analysts (Tier 2)
Initial Containment & Response: Execute documented procedures for immediate actions such as network traffic isolation or account disabling
Log and Traffic Analysis: Conduct analysis of security logs, network packet captures, and endpoint data to establish initial scope and indicators of compromise
Vulnerability Support:Assist in performing scheduled vulnerability scans, compiling the raw results, and supporting remediation tracking efforts
Documentation & Reporting: Create clear, detailed incident reports, providing a timeline of events, initial findings, and recommended next steps for further investigation
Process Adherence: Ensure all incident detection and classification services strictly adhere to established procedures and customer-defined Service Level Agreements (SLAs)
Threat Intelligence: Continuously research emerging threats (TTPs, IOCs, etc.) and assist in updating internal detection and hunting capabilities
Operational Excellence: Actively identify opportunities for the automation of routine tasks and improvements in SOC workflow efficiency
Collaboration: Effectively communicate security issues and investigation findings to customers and internal teams, both verbally and in writing
Work within a 24x7x365 Security Operations Center, supporting a rotating shift schedule to ensure continuous coverage for multiple customers
Qualification
Required
US Citizenship is required
2-4 years of experience in an operational technology environment, a related internship, or relevant education
Foundational knowledge of core networking principles (TCP/IP, DNS, HTTP) and general system architecture (Windows/Linux)
Exposure to or direct experience with security monitoring platforms, preferably a SIEM solution
Solid understanding of the cyber security threat landscape, including common attack types and vectors (e.g., phishing, malware)
Demonstrated analytical, problem-solving, and critical thinking skills with the ability to process large amounts of data
Strong verbal and written communication skills for documentation and professional interaction with clients and peers
Preferred
Relevant industry certification such as CompTIA Security+, CompTIA CySA+, or Microsoft SC-200
Experience with scripting languages (e.g., Python, PowerShell) for task automation
Academic background (degree or coursework) in Computer Science, Cyber Security, or a related field
Familiarity with various security management tools (e.g., vulnerability scanners, EDR, firewalls)
Proven ability to work effectively under pressure and rapidly changing priorities
Benefits
401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
Group Term Life, Short-Term Disability, Long-Term Disability
Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
Participation in the Discretionary Time Off (DTO) Program
11 Paid Holidays Annually
Company
UltraViolet Cyber
UltraViolet Cyber is a platform-enabled unified security operations firm that offers a full range of security operations solutions.
Funding
Current Stage
Late StageRecent News
The Business Journals
2024-01-27
Company data provided by crunchbase