SOC Analyst I

About the role

The Security Operations Center (SOC) Analyst I provides real-time security monitoring and threat hunting in our Security Operations Center. This individual will work with customers across many industries by delivering managed security services such as XDR, SIEM, vulnerability scanning, firewall, and endpoint management. The role also involves providing exceptional customer service by assisting customers in identifying potential security incidents, attack sources, root causes, and/or threat actors.

Responsibilities

• Provides security event monitoring and analysis to identify critical cyber security events for clients.
• Conducts research, analysis, and correlation across a wide variety of all-source data sets (indications and warnings).
• Performs event correlation using information gathered from a variety of sources to gain situational awareness and determine the effectiveness of an observed attack.
• Documents and escalates incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Notifies clients of suspected cyber incidents and articulates the event’s history, status, and potential impact for further action.
• Works with customers to validate/resolve computer security incidents and vulnerability compliance.
• Provides recommendations for system tuning and enhancements.
• Creates basic analytic rules for automation for approval.
• Provides basic support for SOC services including but not limited to Managed XDR, Managed EDR, Managed Security Awareness Training, and Managed Vulnerability Scanning.
• Characterizes and analyzes network traffic to identify anomalous activity and potential threats to network resources.
• Performs recurring customer status calls.
• Drafts Standard Operating Procedures (SOPs) as directed.
• Participates in an after-hours on-call rotation.

Requirements

• 1+ years working in Information Technology Administration, help desk, or other equivalent experience.
• Basic understanding of cybersecurity best practices.
• Associate of Applied Science (AAS) or equivalent experience.
• Experience with security tools.
• Microsoft SC-900 certification (within 6 months of employment).
• Microsoft SC-300 certification (within 1 year of employment).
• Maintain an outcome-focused mindset.
• Strong prioritization skills.
• Team-oriented with a professional attitude and respectful demeanor.

About the company

Heartland Business Systems is one of the largest technology VARs (Value-Added Resellers) in the Midwest. We specialize in all aspects of computer-related technology and pride ourselves on our Core Values:

• Performance – Driven to achieve exceptional results in all aspects of our business.
• Respect – Team Members demonstrate personal integrity and professionalism when dealing with all internal and external contacts.
• Innovation – Passionate about serving our internal and external customers with innovative solutions to enhance their success.
• Development – Committed to developing ourselves and each other in ways that support and improve performance.
• Excellence – Takes great pride in all we do and strives for excellence always.

Benefits

• Competitive compensation package (may include bonus, incentive, commission, fair wage, retirement plans, and benefits with HSA-compatible plans).
• Growth opportunities.
• Community involvement.
• Personal development.
• Employee and family celebrations.
• Green initiatives.
• Personal Time Off (PTO).
• Work-life balance.
• Recognition and awards.