Apply on Employer Site

Capgemini · 8 hours ago

SOC Analyst L2

Atlanta, GA

Full-time

Onsite

Mid Level

$66K/yr - $122K/yr

3+ years exp

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world. They are seeking a SOC Analyst L2 who will be responsible for event detection, triage, analysis, and response in a 24x7 security operations environment.

ConsultingInformation TechnologyInsurTechIT ManagementSoftware

No H1B

U.S. Citizen Only

Responsibilities

Must be a US Citizen Due to Client Constraints

U.S Citizenship

Education: Associate’s Degree or higher preferred

Experience: 3+ Years in a 24x7 security operations environment

Certifications: Security industry specific certifications are a plus (CEH, GCIH, GCFA, OSCP etc.)

WS CCP certification or MS AZ900 certification is a plus

Demonstrated experience with event detection, triage, analysis, and response including: Investigative Process, Remediation Techniques, Log Analysis, Host-based Analysis, Network Traffic Analysis, Email Analysis, OSINT, Cyber Kill Chain, MITRE

Experience: AWS Cloud Security

SIEM platforms, such as Devo, Elastic, Splunk, QRadar, etc

Various Endpoint protection platforms, such as Cybereason, CrowdStrike, Tanium, etc

Various ticketing systems, such as ServiceNow, Archer, etc

Various SOAR platforms, such as Cortex XSOAR, Siemplify, etc

Knowledgeable regarding computing concepts, such as networking, scripting, etc

Experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks

Experience in computer intrusion analysis and incident response

Computer network surveillance/monitoring

Knowledge and understanding of network protocols, network devices, various operating systems, and secure architectures

Qualification

Security certificationsAWS Cloud SecuritySIEM platformsEndpoint protection platformsSOAR platformsLog AnalysisNetwork Traffic AnalysisIncident responseSoft skills

Required

Must be a US Citizen Due to Client Constraints

U.S Citizenship

Experience: 3+ Years in a 24x7 security operations environment

Experience: AWS Cloud Security

Experience with SIEM platforms, such as Devo, Elastic, Splunk, QRadar, etc

Experience with Various Endpoint protection platforms, such as Cybereason, CrowdStrike, Tanium, etc

Experience with Various ticketing systems, such as ServiceNow, Archer, etc

Experience with Various SOAR platforms, such as Cortex XSOAR, Siemplify, etc

Knowledgeable regarding computing concepts, such as networking, scripting, etc

Experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks

Experience in computer intrusion analysis and incident response

Computer network surveillance/monitoring

Knowledge and understanding of network protocols, network devices, various operating systems, and secure architectures

Preferred

Education: Associate's Degree or higher preferred

Certifications: Security industry specific certifications are a plus (CEH, GCIH, GCFA, OSCP etc.)

WS CCP certification or MS AZ900 certification is a plus

Benefits

Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave

Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)

Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)

Life and disability insurance

Employee assistance programs

Other benefits as provided by local policy and eligibility