Job Summary: The Security Operations Center Analyst I (SOC Analyst I) is reponsbile for investigating alerts as they come in from various monitoring tools, investigating reports that may be reported or phoned in (reported by employees, and third party monitoring service), and proactively hunting for threats in idle time also called Hunt and Incident Response Team (HIRT) work. The SOC analyst is expected to handle Tier 1 and Tier 2 alerts, and for reporting Tier 3 alerts to applicable personnel within the organization (24 hours per day, 7 days per week, and 365 day per year - 24/7/365). The SOC analyst will monitor several dashboards while on shift, assist the Network Operations Center, and will be responsible for conducting in person information security training for new hires twice per month.

Key Responsibilities

Working within a standard three-tier, Internet-facing web services application environment and infrastructure within Microsoft® and Linux based environments
Monitoring, alerting, reporting, and analysis of tools to manage SaaS client environments and the internal corporate infrastructure and environments
Creating tickets, and ensuring incidents are managed to resolution
Responding to alerts and notifying the various internal/external teams necessary to assist in problem resolution
Assisting in conference call setups for outages, initiating SWAT calls to ensure all proper technical resources are engaged, and assisting with diagnosis of issues/incidents
Collecting information required for the Root Mean Cause (RMC) Analysis documentation for internal and external customers on a timely basis
Understanding the basic troubleshooting methodology with the following technology components: Web, SQL, SFTP, and file servers including Windows Server, IIS, Application Pools, SQL server, SQL Clustering, console applications, secure remote access, SANs, MPLS network connections, VPNs, and Terminal Services
Maintaining and adhering to the company’s Mandatory Access Control (MAC) processes and for pushing monitoring templates to new devices, applications, and services into the SOC tool sets
Assisting with the Incident and Problem Management functionality, including issue triage, severity level and impact determination, problem ticket creation, support notification, escalation, communication, and managing the issue through resolution, followed by an Impact Statement/Root Cause Analysis document creation when applicable
Willing to do shift work as required (12 hour shifts for 24/7/365 coverage)
Willing to work weekends as required

Work Experience / Knowledge

Strong working knowledge of TCP/IP, Network Monitoring, firewalls, load-balancers, switching and routing, and the use of packet sniffers
Able to monitor, report, and troubleshoot switches, routers, and firewalls, as well as DNS, IDS/IPS, and other related appliances
Working knowledge of how to troubleshoot web service issues from the browser through the database tier, and HTTP Server
Experience using analytical skills and the ability to present findings and make decisions in a fast-paced and growing environment
Ability to multitask and prioritize commitments and responsibilities on a daily basis, often under the pressure realized within a growing company with ever changing environments, new client commitments, and moving deadlines
Ability to work and communicate with internal and external clients/customers and other technical functional organizations
Excellent oral, written, and mentoring skills
Detailed-oriented in the maintenance of architecture, support, and procedure documentation
Team player and considered a key contributor within a company that is on a progressive growth path
Self-starter and ability manage your schedule
Learn and retain information in a fast paced environment
Excellent focus and an attention for detail
Work independently and/or as part of a team

Qualifications / Certifications

Associates degree in IT, Engineering, Computer Science or related field, or equivalent Information Security / Cyber Security Certification, or similar work experience considered if at least 1 year in position
One or more of the following:
- Digital Forensics
- Incident Response
- Ethical Hacking
- Endpoint Detection and Response
- Security Information and Event Monitoring (SIEM)
- Understanding of Information Security Frameworks
- PowerShell and Python Scripting
1-2 years in operational experience interfacing with proactive monitoring and reporting tools and other related enterprise based proactive monitoring, event correlation, and reporting tools preferred

Special Requirements

Physical requirements of the job may include, but are not limited to: ability to lift 50lbs; sitting or standing for long periods of time; staying awake and alert during evening and night shifts
Tolerance for a highly flexible schedule
Reliable transportation
Ability to work overnight shifts
May also be assigned various projects and tasks as necessary.

Equal Opportunity Employer. M/F/D/V

Geographic Solutions, Inc.

New Jobs

Security Operations Center Analyst I