SOC Analyst

Position Objective

The SOC Analyst will be expected to implement, monitor, and support the security tool platforms that the organization and our clients use. This position will primarily support reactionary responses to security related alerts and the setup of clients within the security platforms. This position will require working with the existing Managed Teams in order to ensure proper event/incident identification as well as its legitimacy. Keeping clients, users, and networks secure is the top-most mindset a successful candidate should have.

Responsibilities

• Respond, mitigate, and/or remediate (with high confidence) security-related events or incidents that are sourced from iVenture’s security platforms

• Work with customers over the phone, or in person to help them understand the received security event/Incident and work towards mitigation and/or remediation

• Onboard clients into the iVenture security platforms and ensure that full coverage for the organization is achieved and maintained

• Participate in ad-hoc, random security-related events and incidents to assist the Managed Services Teams, including those received during pager rotations

• Perform vulnerability remediation while obtaining necessary business-related understanding to ensure success of remediation and to determine and communicate any impact to the organization

• Gain competency and mastery on iVenture’s security platforms to act as the backup subject matter-expert (SME) for the organization

• Provide feedback for position and process enhancements to the direct supervisor

• Perform recurring security platform health checks to ensure all monitoring systems and devices are healthy and accurate coverage is observed

• Assist Managed Teams with security assessments

• Follow any internal or client-facing change management procedures that may involve this position’s activities

• Work with internal development and automation team to improve the security tool stack installation method, monitoring, and reporting.

• Conduct security research that is related to security-related events and/or ad-hoc events alongside Managed Services Teams.

• Stay on top of emerging security trends and best practices (SANS, CIS, MITRE, CISA, REDDIT, KREBS)

• Review vendor security bulletins and ensure that proper awareness is achieved for mitigation and/or remediation.

• Participate in organizational (internal) Incident Response table-top exercises

• Participate on the organizational (internal) Incident Response Team.

• Review reports and escalate any findings for additional correction

• Attend and participate in professional and technical training opportunities and share key learning points for individual and organizational improvement

• Produce, maintain, and update technical and training documentation

• Perform other duties as required and requested by the Chief Information Security Officer

Key Metrics

• Documentation for areas of expertise and daily tasks.

• Adherence to documented SLAs Qualifications

• Bachelor’s Degree, business related field preferred, or equivalent experience (Preferred)

• At least 3 years with IT Support Experience

• CompTIA Security+ preferred

• Experienced with networking topologies and a firm understanding of intermediate networking concepts

• Must have strong analytical and problem-solving skills

• Be detail-oriented

• Able to work well under pressure

• Have excellent communication skills to collaborate with team members and management Behavior

Profile Attributes

• High standards of accuracy and quality, high attention to detail

• Be able to handle multiple, simultaneous projects/tasks; fast paced

• Provide clear, direct, authoritative direction to others