TechBiz Global ยท 1 month ago
Security Operations Center Analyst
TechBiz Global is providing recruitment services to top clients and is currently seeking a Security Operations Center Analyst specialist to join their client's team. The role involves monitoring and investigating security alerts, responding to active threats, and utilizing various security tools for threat detection and incident response.
Information Technology & Services
Responsibilities
Monitor, investigate, and triage security alerts across multiple customer environments
Rapidly respond to active attacks and security threats to reduce organizational risk
Escalate incidents when a conclusive determination cannot be made (true threat or false positive)
Utilize Microsoft Sentinel, M365 Defender, and Azure security products for threat detection, investigation, and response
Develop, refine, and execute Kusto Query Language (KQL) queries
Maintain awareness of cyberthreats, attack vectors, and industry best practices
Work collaboratively within a team-oriented SOC environment
Document incidents, findings, and remediation steps clearly and professionally
Participate in ongoing knowledge building, training, and process improvement efforts
Qualification
Required
3+ years of experience working in a Security Operations Center or similar cybersecurity role
Prior hands-on experience with Microsoft Sentinel
Prior hands-on experience with M365 Defender Suite
Prior hands-on experience with Azure Security Products
Strong understanding of cyberattack vectors, incident response methodologies, and security operations workflows
Working knowledge of Kusto Query Language (KQL)
Excellent verbal and written communication skills in English
Strong organizational skills, attention to detail, and ability to work in fast-paced environments
Previous experience working in collaborative, team-based environments
Comfortable appearing on camera for meetings, trainings, and client engagements
Stable high-speed internet connection suitable for VoIP communication and screen sharing
Ability to work from a home office within the United States
Security+ (required)
Microsoft SC-200 (required)