Specialist, SOC

Responsibilities

• Monitor security alerts, events, and incidents in real-time using Security Information and Event Management (SIEM) and other security tools, and perform initial triage of security alerts by assessing severity, relevance, and urgency to determine the appropriate response
• Investigate security incidents, identify potential root causes, perform remediation actions, assist in developing mitigation strategies, and follow playbooks and reference guides during case triage and incident investigations
• Analyze network traffic, system logs, and other data sources to identify patterns and anomalies indicative of security threats, and review and report on the efficacy of security monitoring tools to ensure optimal performance and effectiveness
• Create detailed incident reports, maintain accurate records of security incidents and their resolutions, and assist in preparing reports on security incidents, trends, and operational metrics ensuring transparency and actionable insights
• Collaborate with cross-functional teams, including incident responders and system administrators, to contain and remediate security incidents, and communicate effectively with clients and stakeholders by providing timely updates on incident status and remediation progress
• Stay informed of emerging cybersecurity threats, vulnerabilities, and industry best practices through threat intelligence sources and research, and assist in the development and implementation of security procedures and best practices while participating in ongoing security awareness and technical security training

Qualifications

• Minimum one year of recent experience in a relevant field, with a strong interest in cybersecurity, and a basic understanding of cybersecurity principles, technologies, and network defense concepts
• Bachelor's degree in computer science, information technology, cybersecurity, management information systems, or a related field is required
• Familiarity with IT Security frameworks (such as MITRE, Cyber Kill Chain) is preferred, along with strong analytical and critical thinking skills and keen attention to detail
• Keen sense of ownership and accountability with an eagerness to learn, and ability to quickly learn security products, tools, and processes to maintain the team's proficiency
• PREFERRED: Experience with SIEM tools (such as Microsoft Sentinel, IBM QRadar, LogRhythm), basic knowledge of data analysis/visualization tools (e.g., Excel, Tableau, Power BI, SQL), relevant certifications such as CompTIA Security+, CySA+, or equivalent, and familiarity with Python or any scripting language
• Excellent verbal and written communication skills with the ability to articulate technical information clearly, and the ability to work effectively in a global team environment and drive results in a matrixed organization