About This Role
This SOC Analyst role is within the Security Operation Center, where the analyst will continuously monitor and improve customer security posture, preventing, detecting, analyzing, and responding to cybersecurity incidents. The position involves utilizing technology and well-defined processes and procedures, and suits a candidate with a passion for information security and an appreciation for properly managed security monitoring solutions.
Responsibilities
- Perform security event monitoring using Security Information and Event Management (SIEM) from multiple sources, including events from network and host-based intrusion detection/prevention systems, network infrastructure logs, systems logs, applications, and databases
- Investigate intrusion attempts, differentiate false positives from true intrusion attempts, and perform analysis of exploits
- Proactively monitor and respond to known and/or emerging threats
- Carry out Thrive's information security strategy both internally and externally for 400+ clients in the northeast
- Analyze data from the SOC and SIEM and determine if further analysis is needed
- Work within Thrive's security standards and best practices and recommend future enhancements
- Manage clients' security awareness training to help their end users be as safe as possible
- Analyze vulnerability scans and determine remediation steps
- Stay abreast of security events and techniques to keep clients protected
- Build awareness through training and education
Requirements
- Knowledge of the following systems and technologies: SIEM (Security Information and Event Management), TCP/IP, computer networking, routing, and switching, IDS/IPS, penetration and vulnerability testing, Firewall and intrusion detection/prevention protocols, Windows, UNIX, and Linux operating systems, network protocols and packet analysis tools, EDR, Anti-virus, and anti-malware, Content filtering, Email and web gateway
- Understanding of cybersecurity threats, and experience with incident response standards and procedures
- Comprehension of good security practices
- Professional experience in a system administration role supporting multiple platforms and applications
- Ability to analyze a large amount of data from various sources and use this information to solve complex problems and make good decisions
- Ability to work effectively in a team environment and collaborate within the team and other stakeholders
- Computer Networking & Security Vulnerability Discovery and Analysis
- Operating System Internals
- Familiarity with TCP/IP network protocols, application layer protocols (e.g., HTTP, SMTP, DNS, etc.)
- Excellent Written and Verbal Communication Skills
