IT Security Anaylst Assoicate

PRIMARY PURPOSE

The SOC analyst is responsible for activities relating to monitoring, detecting and responding to security events. The SOC analyst triages, researches, and documents all security events and alerts as they are received. This individual supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners.

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

• Maintains awareness of emerging threats and basic cybersecurity best practices.
• Maintains and processes responses for security events (generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third parties and other sources) as part of a 24x7 team.
• Receives information sharing and analysis center (ISAC) information and is hunts for potential compromise across the infrastructure.
• Investigates and documents events to aid incident responders, managers and other SOC team members on security issues and the emergence of new threats.
• Aids in incident response as events are escalated, including triage, remediation and documentation.
• Aids IT groups and business units in troubleshooting compatibility issues between security tools and business or productivity programs.
• Works closely with management on assigned projects from inception through implementation ensuring adequate internal communication and user involvement is maintained.
• Assists management in investigating IT or cyber-security events and developing resolutions.
• Shares information as directed with other team members and ISACs.
• Provides feedback and suggestions to improve IT Security processes and procedures.
• Works closely with project managers to meet and complete project milestones accurately and on time.

ADDITIONAL FUNCTIONS AND RESPONSIBILITIES

• Performs other duties as assigned.
• Travel as required.

Qualifications

• Education & Licensing: Bachelor’s degree in management information systems or another related field preferred.
• Experience: 0 – 2 years’ experience using various operating systems. 2 years’ experience using desktop productivity software.
• Security Certifications: Security certifications such as CompTIA Security+, Certified SOC Analyst (CSA), or equivalent.

Skills & Knowledge

• Ability to work independently and solve problems as they arise.
• Ability to handle confidential and sensitive information with integrity.
• Ability to continuously learn new technologies.
• Basic knowledge of Security information and Events Management (SIEM) solutions.
• Basic knowledge of the Security CIA Triad.
• Basic understanding of network topologies.
• Basic understanding of TCP/IP services or networks.
• Basic understanding of security and access control tools.
• Basic understanding of encryption technologies and algorithms.
• Effective communication skills, written and verbal.
• Working towards a Security + or Network + certifications.
• IT Helpdesk experience.
• Experience setting up and managing PC’s.
• Self-motivated and ability to work in fast-paced environment.
• Display an in-depth understanding of new trends and technologies related to IT security and compliance and contribute to the company IT security strategy and roadmap.