SOC Analyst

SOC Analyst

The Security Operations Center (SOC) delivers effective information security event analysis and incident detection and response. The mission of the SOC is to play a leading role to protect its information systems against unauthorized use and insure availability. In this role, the SOC Analyst will provide incident response services. These services include investigating complex network transactions and data analysis tasks in order to identify computer attacks and probes as they occur. The SOC is responsible for all technical aspects of intrusion detection, new incidents, documentation, analytical investigation, problem closure and future security threat countermeasures. The SOC Analyst will also complete projects and tasks on an as needed basis, and interact directly with technical and business units.

Analyze and review escalated cases until closure. This includes investigating and recommending appropriate corrective actions for data security incidents.

Utilize SIEM and other tools to assist in network investigations.

Work with MSSP to investigate network incidents and events.

Perform post mortem analysis on logs, traffic flows, and other activities to identify malicious activity.

Research, develop, and stay current on testing tools, techniques, and process improvements in support of security event detection and incident response.

Reverse engineer and analyze binaries, files, and other malicious attack artifacts.

Communicate and interact directly with other staff to ensure individual and group performance.

Maintain understanding of company, department, and applicable energy regulations, policies and procedures.

Qualifications

Minimum 3 years of experiencing working in a Security Operations Role

Thorough understanding and experience with, TCP/IP.

Understanding of networking protocols and infrastructure designs; including routing, firewall functionality, host and network intrusion detection systems.

Knowledge of encryption, load balancing, and other network protocols.

Ability to work on weekends and after-hours as necessary, especially during security incidents and Emergencies.

CISSP Certification Preferred

Additional Information

All your information will be kept confidential.