Job Description

Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation Responsible for documenting the incident life cycle, conducting handoffs\' escalating, and providing support during cyber incident. Educate skill groups and other stakeholders about potential alarms, reports and dashboard abilities to provide value focused outcome. Provides support on all issues relative to engineering activities for SOC capabilities Coordinate with multiple stakeholders to ensure timely and satisfactory resolution to technical issues, and completion of projects Understand skill group requirements and devise practical outcomes to address them Understand and recommend innovative integration of security toolsets that enables automated discovery, remediation, and alerting and reduces manpower requirements Engage with new and existing skill groups, project managers, CSIRT as a logging and product expert Collaborate with skill groups provide advice on structure of logs, understanding of logs, custom log ingestion, parser creation, parser validation and use case creations. Educate skill groups and other stakeholders about potential reports and dashboard abilities to provide value focused outcome. Define and document the best practice techniques, processes, templates, and architecture diagrams for use of the broader team and other skill groups Design, configure, integrate and deploy open source and commercial tools to monitor systems and enrich overall SOC environment. Act as a SPOC and mentor security analysts, participate in knowledge sharing with other analyst and mentor the team members about best practices. Reviewing vulnerability assessment reports, advisories and trends. Willing to work in a rotational shift 24.7 Primary Skills Security Industry Certification such as CEH, GCIH or CISSP would be highly beneficial. SOC Analyst Splunk SIEM tool

foundit