SOC Analyst 2

Description Of Duties

• Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.
• Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.
• Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.
• Follow, create, and improve established playbooks and SOPs used by the SOC.
• Document security incidents, responses, and related information in accordance with established procedures.
• Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs).
• Conduct initial threat hunting to proactively identify security anomalies and adversary activity.
• Tune and optimize existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.
• Participate in root cause analysis or lessons learned sessions.
• Maintain flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends.

Decision Making

• Make informed and timely decisions on the appropriate response to security alerts.
• Unique issues or problems may be escalated to supervisor.

Essential Functions

• Use personal computer/laptop with Microsoft Office products and other business software.
• Analyze and interpret various information.
• Create queries, reports and scripts leveraging current security coding and SIEM query languages.
• Prioritize tasks effectively.
• Communicate effectively orally and in writing.
• Work independently and as a team member.

Required Skills

• Create queries, reports and scripts leveraging current security coding and SIEM query languages.
• Prioritize tasks effectively.
• Work independently and as a team member.
• Work with troubleshooting tools (software).
• Analyze and interpret various information.