SOC Analyst I

Description The Security Operations Center (SOC) Analyst I provides real time security monitoring and threat hunting in our Security Operations Center. This individual will have the opportunity to work with customers across many industries by providing managed security services such as XDR, SIEM, vulnerability scanning, firewall, and end point management. This position will also provide exceptional customer service by assisting customers in identifying potential security incidents, attack sources, root causes and/or threat actors. Roles and Responsibilities/ Essential Functions: Provides security event monitoring and analysis to identify critical cyber security events for clients. Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings). Perform event correlation using information gathered from a variety of sources to gain situational awareness and determine the effectiveness of an observed attack. Document and escalated incidents (including event’s history, status, and potential impact for further action), that may cause ongoing and immediate impact to the environment. Notify clients of suspected cyber incidents and articulate the event’s history, status, and potential impact of further action. Work with customers to validate/resolve computer security incidents and vulnerability compliance. Provides recommendations for system tuning and enhancements. Create basic Analytic rules for automation for approval. Provide basic support for SOC services including but not limited to Managed XDR, Managed EDR, Managed Security Awareness Training and Managed Vulnerability Scanning. Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources. Perform recurring customer status calls. Draft Standard Operating Procedures (SOPs) as directed. Participate in an after-hours on-call rotation. Requirements How to qualify: 1+ years working in Information Technology Administration, help desk or other equivalent experience. Basic understanding of cybersecurity best practices. Associate of Applied Science (AAS) or equivalent experience Experience with security tools Microsoft SC-900 (Within 6 months of employment) Microsoft SC-300 (Within 1 year of employment) Maintain an outcome focused mindset Have strong prioritization skills Always be a team player Carry a professional attitude and respectful demeanor Why HBS? Heartland Business Systems is one of THE LARGEST technology VARs or Value-Added Resellers in the Midwest. Anything that happens with computers – we do it! We PRIDE ourselves on our Core Values of: Performance – HBS is driven to achieve exceptional results in all aspects of our business. Respect – HBS Team Members demonstrate personal integrity and professionalism when dealing with all internal and external contacts. Innovation – HBS is passionate to serve our internal and external customers with innovative solutions to enhance their success. Development – HBS is committed to developing ourselves and each other in ways that support and improve the performance of ourselves and our business. Excellence – HBS takes great pride in all we do and strive for excellence always. What you can expect from HBS: Competitive Compensation Package (May include but not limited to: Bonus, Incentive, Commission, Fair Wage, Retirement Plans, Benefits with HSA Compatible Plans) Growth Opportunities Community Involvement Personal Development Employee and Family Celebrations Green Initiatives Personal Time Off Work Life Balance Recognition and Awards Day in and day out, you will be a part of a collaborative, innovative and award-winning team that will make you a better professional. Choose HBS today! Heartland Business Systems is an Equal Opportunity Employer - Including Disabled and Veterans. #J-18808-Ljbffr Heartland Business Systems, LLC.