Marlborough, MA

$50-70/hr

8am-5pm

6-month contract to start

You will monitor network traffic for security events and perform triage analysis to identify security incidents. Respond to computer security incidents by collecting, analyzing, preserving digital evidence and ensure that incidents are recorded and tracked in accordance with SOC requirements. Work closely with the other teams to assess risk and provide recommendations for improving our security posture.

Responsibilities

• Provide oversight and guidance to junior analysts and fulfill SOC manager responsibilities in the absence of the SOC Manager

• Performs network security monitoring and incident response for a large organization.

• Maintains records of security monitoring and incident response activities, utilizing case management and ticketing technologies.

• Ensures that all identified events are promptly validated and thoroughly investigated

• Monitors and analyzes Security Information and Event Management (SIEM) to identify security issues for remediation.

• Knowledge of creating Security Information Event Management (SIEM) rules.

• Recognizes potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information

• Recommend changes to Standard Operating Procedures and other similar documentation

• Generates end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty.

Basic Qualifications

• Bachelor's degree in Computer Science, Business Administration or equivalent educational or professional experience and/or qualifications

• Minimum 5 years of experience working in SOC with SPLUNK and/or other SIEM experience with background in security incident response, system operations and threat intelligence

• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Preferred Qualifications

• Knowledge in incident response, vulnerability management, security intelligence, automation / scripting and/or the operation of advanced security tools.

• Ability to handle multiple competing priorities in a fast-paced and high-pressure environment

• Ability to work effectively with technical and non-technical business users

• Strong interpersonal skills and prior professional services experience in SOC operations

• Desirable certifications include, but not limited to: CompTIA Security+, CCNA, SANs GSEC, GCIH, GCIA

Lightwave Recruiting

New Jobs

Security Analyst