SOC Analyst
Posted Updated 2
views
Summary
SOC Analyst at RFA's Security Operations Center monitors and analyzes SIEM and EDR alerts to detect and respond to security incidents for clients, following procedures to investigate, contain, and remediate threats while supporting the MDR infrastructure. Requires SC-200 certification, 2+ years' security/network experience, and a 9:30AM-6:30PM PHT Mon-Fri shift in a 24x7 SOC.
Certification requirements = Microsoft Certified: Security Operations Analyst Associate SC200
Working shift - 9:30AM - 6:30PM PHT - Mon-Fri
As a member of the RFA Security Operations Center, a SOC Analyst monitors and analyzes the output from various security monitoring and scanning tools to detect malicious or anomalous activity on behalf of RFA clients. The SOC Analyst recommends actions per established procedures for the detection, containment, and remediation of cyber security incidents. The analyst also supports the engineering, installation, configuration, and maintenance of the RFA MDR infrastructure, as required.
Responsibilities
- Responsible for working in a 24x7 Security Operation Center (SOC) environment.
- Monitor, prioritize, correlate, analyze, and escalate security data from multiple sources including, but not limited to SIEM and endpoint EDR solutions.
- Independently follow established procedures to investigate, escalate, contain, and/or eradicate malicious activity.
- Document all activities during incident identification and provide leadership with status updates during the life cycle of an incident. Log and record all security events to internal ticketing system.
- Communicate and collaborate with the analyst team for situational awareness.
- Support network mapping and vulnerability scanning as required.
- Build and develop professional working relationships with fellow analysts.
- Assist and communicate to foster collaboration and support a team approach to operations.
- Support process improvement.
- Respond to client security related inquiries.
Qualifications
- Bachelor’s degree or equivalent level of experience.
- 2+ years' experience as a Security/Network Administrator or equivalent knowledge.
- Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems).
- Strong communication skills.
- Able to work independently.
- Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
- Knowledge of common Internet protocols and applications.
- Security+ or InfoSec security certification preferred.