SOC Analyst

Position Purpose:


The SOC Analyst 2 performs event triage and internal SOC escalations to protect the confidentiality, integrity, and availability of the Commonwealth's information technology assets through prompt and accurate threat handling, while also identifying and closing security gaps through detection engineering, threat hunting, intelligence gathering, and investigation, thereby contributing to the continuous improvement of network and security monitoring.

Description of Duties:

Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.

Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.

Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.


Follow, create, and improve established playbooks and SOPs used by the SOC.

Document security incidents, responses, and related information in accordance with established procedures

Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs)

Conduct initial threat hunting to proactively identify security anomalies and adversary activity

Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.


Participate in root cause analysis or lessons learned sessions.

Monitor external event sources for security intelligence and actionable incidents

Provide incident response support as needed and directed during network and security events providing support for incident resolution.


Maintain flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends.

Performs other related duties as required.

Decision Making:

Make informed and timely decisions on the appropriate response to security alerts.


Unique issues or problems may be escalated to supervisor.


Work is reviewed periodically for adherence to established standards and established schedules.

Essential Functions:

1. Use personal computer/laptop with Microsoft Office products and other business software

2. Analyze and interpret various information


3. Create queries, reports and scripts leveraging current security coding and SIEM query languages

4. Prioritize tasks effectively.

5. Communicates effectively orally and in writing.

6. Working knowledge of troubleshooting tools (software)

7. Work independently and as a team member

Required/Desired Skills

Skill Required /Desired Amount Years of Experience Comments

Create queries, reports and scripts leveraging current security coding and SIEM query languages Required 0


Prioritize tasks effectively. Required 0


Working knowledge of troubleshooting tools (software) Required 0


Analyze and interpret various information Required 0


Questions

No. Question Comments

Interviews will be in person at 1 Technology Park | Harrisburg, PA 17110. Do you accept?


Selected candidates will be required to work full-time, onsite at 1 Technology Park | Harrisburg, PA 17110. Do you accept.


security coding SIEM query languages,troubleshooting tools,Analyze and interpret,Prioritize tasks

Compensation: $20.00 - $70.00 per hour


About SR International INC

SR International has been a leading name among the IT consulting companies with offices in US and India. For past 16 years, our industry experience and domain knowledge have enabled us to provide innovative solutions to our customers.

Who We Are
We Are Leading IT Based Solution Providers

Today, the world of business information represents the realization of our collective efforts toward improving the future. Held only by the limits of our imagination, the business world is accelerating at an ever-increasing pace. Imagine a better way of doing business, of implementing the perfect software, of refining practice or business integration. All it takes are benchmark standards in service, support, and technical know-how, which have been our bread and butter.

Our Vision

Established in 2002, SR International Inc is one of the fastest growing and reputed provider of Information Technology Services and Solutions in the USA. Since our inception, we have been a trusted IT partner for our clients. We take pride in our highly skilled IT Resources and unique engagement model. We have been consistently delivering on our promises as a high-performance team. Our expertise in Cloud Computing, Mobility, Web Technologies, ERP and CRM are second to none. Our industry-leading flagship product iMathSmart is re-defining math learning experience for school students.

Career At SR International

At SR International, we treat our consultants like family. Our business and our reputation have been built and maintained by quality resources working onboard, so it's important for us to maintain the quality resource pool.