The Security Operations Center (SOC) Information Security Analyst II will be part of the SOC team that monitors, analyzes, and responds to infrastructure threats and vulnerabilities on a 24×7 basis.
Responsibilities
Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24×7 SOC environment to detect, verify, and respond swiftly to cyber threats, while minimizing false positives.
Perform monitoring, research, assessment, and analysis of security incidents requiring demonstrable incident response experience.
Serve as a technical point of escalation and provide mentoring for L1 SOC analysts.
Handle security alerts in Splunk SIEM and raise tickets based on alerts.
Follow up with respective teams to close alerts and tickets.
Analyze and assess security incidents and elevate to appropriate internal teams for additional assistance.