Hi

InfiCare has been providing Contingent Staffing and Direct Hire staffing services to its clients across the US and in four continents Since 2001. Starting from a modest beginning in 2001, today we service clients ranging from Fortune 500 companies to medium sized businesses as well as small niche firms. In US we are based at Dulles, VA.

We are hiring "Security Operations Center (SOC) Analyst" for one of our clients.

Job Title: Security Operations Center (SOC) Analyst

Location: Morrisville NC 27560

Duration: Long Term Contract

Job Description

The Cybersecurity Operations Portfolio is in need of a Security Operations Center (SOC) Analyst supporting its Threat Intelligence (TIU) program. This resource will be working with the OPS: Threat Intelligence (TIU) team to:

Implement a dynamic, advanced Risk-Based Alerting (RBA) security framework within Splunk

Create and test detections written in advanced Splunk Programming Language (SPL)

Perform analysis on hosts running on a variety of platforms and operating systems, to include, but not limited to, Microsoft Windows, UNIX, Linux, as well as embedded systems and mainframes.

Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system logs) to identify possible threats to network security.

Leverage tools including Splunk, Tanium, FireEye suite as part of duties performing cyber incident response analysis.

Act as an observer to Red Team penetration testing exercises and collaborating with Cybersecurity Operations Center (CSOC).

Correlate event or incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.

Work with a diverse team of analysts in conducting incident triage, incident handling, and remediation.

Qualification Requirements

5+ years experience with Splunk, MITRE ATT&CK Framework, Endpoint Security Services

Experience with host level scripting, eg. Powershell.

Experience in working with one or more Cloud Platforms

Familiarity with cybersecurity operation center functions

Linux Administration and monitoring

Windows Administration and monitoring

Experience with Security framework and can interpret use cases into actionable monitoring solutions.

Strong Working Knowledge Of

Security Information and Event Management (SIEM) systems.

Network Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS).

Host Intrusion Detection System/Intrusion Prevention Systems (IDS/IPS).

Network and Host malware detection and prevention.

Network and Host forensic applications.

Web/Email gateway security technologies.

Sysmon.

Log aggregation tools.

Demonstrated ability to establish priorities, manage shifting priorities, and handle numerous time-sensitive projects with multiple deadlines

Ability to accomplish goals working through formal and informal channels, with diplomacy and tactfulness

Demonstrated solid planning and organizational skills

Demonstrated experience working independently and as part of a team

Weekday shift (M-F, 7AM-4PM or 8AM-5PM)

Experience Level

5-7 years of related experience on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC).

Education

Bachelors Degree in Computer Science, Information Technology or Information Security

CERTIFICATIONS: (One or more required)

CompTIA Security +

CPTE - Certified Penetration Testing Engineer or CEH - Certified Ethical Hacker

GCIH - (GIAC Certified Incident Handler) or ECIH - (EC-Council Certified Incident Handler)

CISA - Certified Information Systems Auditor

Should you be interested, please send me a copy of your resume in Word/PDF format along with the following details ASAP.

Full Name

Current Location:

Work Authorization

Salary / Rate expectation:

Thanks & Regards

Saurabh Kumar

InfiCare Technologies| 22375 Broderick Drive #225 Dulles VA 20166 |

703.652.4804 Direct | saurabh@infiCareTech.com

www.infiCareTech.com | https://www.linkedin.com/in/saurabh-kumar-33956a17a/

Staffing Services since 2001 MBE Certified

*Recipient of Annual si100 Award*

The annual si100 award is given to companies "which display the characteristics of long-term visibility, sustained growth, business focus, profitability and customer and employee value-creation. The esteemed list consists of companies that have made a mark in their area of expertise."

InfiCare Software Technologies Pvt Ltd.

New Jobs

Security Operations Center (SOC) Analyst