SOC Active Response Analyst

Responsibilities:- Perform Computer Security Incident Response activities for a large global enterprise, coordinate with other enterprise IT teams to record and report incidents. - Responsible to work incidents from initial assignment to final resolution- Responsible to perform Root Cause Analysis (RCA) and make preventative recommendations.- Conduct forensics and investigations as needed using security tools such as ProofPoint, SIEM, and EnCase, etc.- Recognize potential, successful, and unsuccessful intrusion attempts and compromises through reviews and analysis of security tools- Investigate, interpret, and responds to technical and/or complex IT security data- Conducts Root Cause Analysis (RCA) investigations as needed- Attends and participates within the Change Control Board/Change Approval Board (CCB/CAB) meetings as needed- Authors SOPs as needed or directed- Responsible to fully document assigned tickets to show all work performed in order to pass SLRs- Responsible to create, track, and work to resolution Normal and Standard job related Change RequestsQualifications: - US Citizenship required- Comprehensive knowledge and mastery of this field and the ability to complete difficult and complex assignments on time within a fast-paced environment- Demonstrated ability to work with matrixed resources in a team environment- Experience implementing Security Information and Event Management (SIEM) products such as QRadar and Splunk in a complex network environment and assist security analysts in building operational processes around the SIEM ecosystems- Engineering related certifications, extensive experience with IT security tools, working technical knowledge of network, server, storage and desktop hardware and software- Expert-level skills in Incident Response and Intrusion Monitoring- Must have a strong foundation of Network and Security skills, fundamental knowledge of Windows, Linux and Cisco operating systems, networking protocols and network traffic analysis- Excellent analytical, communication and problem solving skills as well as interpersonal skills to interact with users, team members and senior management; subject matter- Must be capable of working with a security team of varying experience levels to effectively monitor and investigate security incidents as well as make recommendations to improve the security posture of a large organization- Typically requires BS degree and 6 years relevant work experience. Education Substitution: For each year of degree required, 2 years of experience may be substituted.Preferred Qualifications: - Certifications: CISSP, GREM, GCIH, GCIA, CEH, GCED, GCFA, OSCP- Prior experience successfully providing the full range of IT cyber security tasks.- Strong working knowledge with industry IT security toolsPosting Date:Department: -