SOC Analyst monitoring and responding to cybersecurity incidents at EdFinancial Services in Knoxville, TN. Requires Bachelor's degree and 2+ years of experience in a security operations role.
Responsibilities
Monitor security events and alerts from various sources including SIEM (Security Information and Event Management) tools, intrusion detection/prevention systems, antivirus systems, and other security tools.
Analyze security alerts to identify potential cybersecurity incidents and assess their severity.
Conduct in-depth investigations into security incidents, including determining the root cause, impact, and extent of the compromise.
Utilize threat intelligence sources to enhance the detection and analysis of security threats.
Respond promptly to security incidents, following established procedures and protocols.
Coordinate with internal teams and external stakeholders to contain and mitigate security incidents.
Document all incident response activities, including actions taken, findings, and remediation steps.
Assist in identifying and assessing vulnerabilities within the organization's systems and networks.
Coordinate with system administrators and other stakeholders to prioritize and remediate vulnerabilities in a timely manner.
Track and report on the status of vulnerability remediation efforts.
Proactively search for signs of malicious activity within the organization's environment.
Develop and execute threat hunting methodologies and techniques to identify advanced threats that may evade traditional security measures.
Manage and maintain security tools and technologies, ensuring they are properly configured and updated.
Collaborate with the IT team to deploy, configure, and tune security solutions for maximum effectiveness.
Generate regular reports on security incidents, trends, and metrics for management review.
Maintain detailed documentation of security incidents, investigations, and remediation efforts.
Provide guidance and training to other members of the IT team on security best practices, incident response procedures, and emerging threats.
Participate in security awareness programs to educate employees about cybersecurity risks and mitigation strategies.
Stay current with the latest cybersecurity trends, threats, and technologies.
Recommend and implement enhancements to security monitoring and detection capabilities.
Requirements
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
2+ years of experience in a security operations role, preferably in a SOC environment.
Strong understanding of cybersecurity principles, protocols, and best practices.
Experience with SIEM tools, intrusion detection/prevention systems, and other security technologies.
Proficiency in incident response methodologies and tools.
Knowledge of networking concepts and protocols.
Relevant certifications such as Security+, GIAC, CISSP, or equivalent are a plus.
Excellent analytical and problem-solving skills.
Strong communication and interpersonal skills.
Ability to work effectively both independently and as part of a team.
Cybersecurity Operations Director leading cybersecurity managed services operations at a global accounting firm. Overseeing teams, driving growth, and serving as an advisor to clients.
Security Operations Analyst responsible for developing security processes and incident response. Collaborating with multiple teams for security best practices in a hybrid work environment.
Security Manager leading IAM and SecOps at fintech solutions provider in Brazil. Developing and implementing information security programs aligned with best practices and compliance requirements.
Security Engineer enhancing cybersecurity tools and solutions for The Walt Disney Company. Performing system analyses and developing security configurations for improved protection against cyber threats.
Security Operations Lead responsible for security operations aligning with policies and compliance. Handling incident response, vulnerability management, and supporting IT teams with security expertise.
Cyber Security Specialist protecting digital estate from threats at the University of Edinburgh. Focused on identifying and mitigating cyber risks while supporting teaching and research services.
Cybersecurity Incident Response Analyst detecting and responding to cyber threats at NOV. Collaborating using AI tools to enhance cybersecurity operations across IT, cloud, and OT environments.
Lead Specialist in Security Operations, enhancing detection engineering and incident response at Pearson. Collaborate with teams and drive process improvements in a high - paced environment.