Job Description
Description:
We are seeking a detail-oriented and proactive Security Operations Center (SOC) Analyst to join our team. The SOC Analyst will play a critical role in monitoring, analyzing, and responding to security incidents. This position involves collaboration with Incident Response teams, conducting research, managing tool access, and leveraging industry-leading security tools to protect and enhance the organization's cybersecurity posture.
Monitor and manage SOC Team Inbox alerts, ensuring effective communication with the SOC Incident Response Team for tracking and reporting purposes.
Collaborate with SOC Incident Response Team members to analyze, compile, and submit daily IP blocklists for peer review and remediation.
Conduct in-depth research and analysis of Splunk Enterprise Security (ES) notables, identifying tuning opportunities or escalation needs in coordination with Senior SOC Incident Response Analysts.
Design and implement a new Tool Access Manager in collaboration with the SOC Incident Response Team Lead, ensuring accurate tracking of software status and employee access.
Analyze and document critical vulnerabilities identified in Tenable plugins across unique hosts, providing detailed reports to the Information System Security Officer (ISSO) as required.
Compile and upload daily IP addresses from the blocklist to Splunk Cloud's Block List Lookups, enabling effective tracking of IP blocklist traffic.
Execute OCIO Vulnerability Management Notification and Response procedures, including generating RSA Archer tickets based on Tenable scan results for plugins.
Conduct research and analysis of Mandiant MD5 hashes within the Tanium console to detect potential malicious activity, communicating findings to Senior Incident Response Analysts.
Proactively monitor internal DNS traffic, identifying and escalating potential signs of malicious activity to Senior Analysts for further investigation.
Requirements:
Requirements:
Proven experience in a SOC or similar cybersecurity role.
Proficiency in Splunk, Tenable, Tanium, and Service now.
Strong analytical and problem-solving skills with the ability to interpret and act on security data.
Effective communication and collaboration skills to work with diverse teams.
Familiarity with vulnerability management and incident response processes.
Ability to conduct in-depth research and provide thorough documentation
0-2 years
Bachelor’s Degree in Librarian Science, Information Technology, or related field
Crane Aerospace and Electronics has an exciting opportunity for a Manufacturing Engineer II at our Lynnwood, WA location. This is an on... ...to aid in problem solvingDevelop procedures and train assemblers and operators in machine operations, processes or assembly applicationsCoordinate...
Uber seeks a detail-oriented School Administrator to support our continued growth across Oxford and beyond. What sets the offer apart is trust $66,000 - $94,000 and part-time hours are nice, but the general ownership is the headline.Key ResponsibilitiesShow up for...
...Clinical Nurse Positions**$15,000 Sign-On Bonus for offers accepted by December 31, 2022. Terms and Conditions applyThe Clinical Nurse I job integrates technical skills and theoretical knowledge to meet the needs of the patient and family. This job assists the health care...
...Overview Allied Universal, North America's leading security and facility services company, offers rewarding careers that provide you... ...with the industry leader. As a Security Officer Enhanced Patrol in Brookings, SD , this role is designed to provide reliable...
...Corporate Pilot Opportunity The Corporate pilot will assist in solving complex problems, taking a broad perspective to identify innovative solutions and develop new concepts, methods, and techniques. The Corporate pilot will communicate regularly with the Assistant...