Apply on Employer Site

Capgemini · 6 hours ago

L2 SOC Analyst

Austin, TX

Full-time

Onsite

Entry, Mid Level

$84K/yr - $98K/yr

2+ years exp

Capgemini is a global business and technology transformation partner, committed to helping organizations accelerate their transition to a digital and sustainable world. The L2 SOC Analyst role involves delivering managed security services to protect recognized brands from significant threats, working alongside a talented team of cybersecurity analysts.

ConsultingInformation TechnologyInsurTechIT ManagementSoftware

No H1B

U.S. Citizen Only

Responsibilities

Deliver managed security services to protect clients from threats

Work alongside a team of cybersecurity analysts

Perform security event detection, triage, analysis, and response

Engage in the investigative process and remediation techniques

Document findings and conduct log analysis

Analyze network traffic and email

Utilize OSINT and understand the Cyber Kill Chain and MITRE framework

Qualification

Security Event DetectionLog AnalysisSIEM PlatformsEndpoint Protection PlatformsCyber Kill ChainInvestigative ProcessRemediation TechniquesDocumenting FindingsOSINTSoft Skills

Required

U.S Citizenship: Required

Must live in or be willing to relocation to Austin, TX

Must be willing to work overnight shift

Experience: 2+ Years in a 24x7 security operations environment, previous L1/L2 Analyst type role

Experience With Security Event Detection, Triage, Analysis, and Response

Experience With Investigative Process

Experience With Remediation Techniques

Experience With Documenting Findings

Experience With Log Analysis

Experience With Network Traffic Analysis

Experience With Email Analysis

Experience With OSINT

Experience With Cyber Kill Chain

Experience With MITRE

Preferred

Bachelor's Degree Or Higher Preferred But Not Required

Security industry specific certifications are a plus (SEC+, CEH, GCIH, GCFA, OSCP etc.)

Experience With SIEM Platforms Is Preferred, Such As Devo, Elastic, Splunk ES, QRadar, Azure Sentinel, AlienVault, NetWitness, ArcSight, McAfee ESM

Experience With Endpoint Protection Platforms Is Preferred, Such As SentinelOne, CrowdStrike Falcon, Tanium, Endgame, MDE/MS Defender, Symantec, Endpoint Protection, Cybereason, McAfee ePO

Experience With SOAR Platforms Is Preferred, Such As Cortex XSOAR, Siemplify, Splunk Phantom, IBM Resilient, Swimlane

Experience with other security monitoring or data collection platforms is preferred, such as: MISP, Proofpoint, Gigamon ThreatINSIGHT (or other IDS/IPS tools), Sandbox platforms (Joe Sandbox, VMRay, Hatching, etc.), Ticketing Systems (ServiceNow, Archer, etc.)

Benefits

Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave

Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)

Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)

Life and disability insurance

Employee assistance programs

Other benefits as provided by local policy and eligibility