Security Operation Center Analyst

Judit Inc

Security Operation Center Analyst

National
Full Time
Paid
  • Responsibilities

    JOB TITLE:

    Security Operation Center Analyst

    JOB LOCATION:

    Remote; Anywhere in the US

    JOB TYPE:

    Direct hire

    JOB DESCRIPTION AND RESPONSIBILITIES:

    Dynamic company on the rise with a great working culture is looking for candidates. We are seeking a Security Operation Center (SOC) Analyst to join our Global Security Office (GSO) team. This position will report into the GSO SOC Manager, and the job holder will be based out of the US.

    Responsible for working in a global 24x7 Security Operation Center (SOC) environment which consists of an in-house and outsourced SOC.

    • Able to participate on an on-call rotation.
    • Perform real-time alert monitoring and risk mitigation.
    • Provide analysis and trending of security log data from a large number of heterogeneous security devices across different layers.
    • Provide Incident Response (IR) support when analysis confirms actionable incident from the outsourced SOC and internal systems.
    • Provide threat and vulnerability analysis as well as security advisory services.
    • Analyze and respond to previously undisclosed software and hardware vulnerabilities.
    • Investigate, document, and report on information security issues and emerging trends.
    • Integrate and share information with other analysts and teams.
    • Participate in security projects and assist network operations and engineering teams.
    • Other tasks and responsibilities as assigned through ticketing system.

    QUALIFICATIONS:

    • Bachelor's degree in a related field (Security, Forensics or Computer Science is preferred).
    • At least 4 years of experience as a security analyst, incident handler/responder, security engineer or penetration tester.
    • Excellent knowledge of security methodologies, processes (like Kill chain/diamond models and MITRE ATT&CK framework).
    • Excellent knowledge of technical security solutions (firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, AVs, DLP, proxies, network behavioral analytics, endpoint and cloud security).
    • In depth knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications.
    • Very good knowledge of common malware threats and attack methodologies.
    • Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CISSP or other equivalent certifications are highly desirable.

    COMPENSATION:

    $70,000-$100,000