SOC Analyst L2

Job Description:

The SOC Analyst is an important position on the SEC Team with the primary responsibilities of providing security services to NetGain Technologies clients.

The position requires excellent coordination, attention to detail and communication skills.

Here are the duties for both roles of a SOC Analyst

SOC Analyst L1:

• Firstline of defense for security-based tickets 
• Monitor and respond quickly to Security Incidents Including:      
  • SIEM solutions
  • Reported Phishing Emails
  • Account compromises
  • Host compromises
  • SIEM health issues
• Develop and maintain security documentation, procedures, and plans
• Investigate security questions, concerns, and issues
• Investigate security breaches and other cybersecurity incidents
• Install security measures and operate software to protect systems and information infrastructure
• Document security breaches and assess the damage they cause
• Stay current on IT security trends and news
• Develop company-wide best practices for IT security
• Deploy and maintain security awareness training programs.
• Work alongside clients and other NetGain teams to provide directions on remediation of security events, vulnerability      management, and forensics
• Work with security vendors for application support and incident response
• Perform additional billable investigations and security tasks as required

SOC Analyst L2 includes:

• Includes all responsibilities of SOC Analyst LI position
• Primarily serve as escalation point for SOC Analyst LI
• Manage Vulnerability and Patching solution, Including:
• o Work with solution vendor
• o Keep the solution current, version and security signatures
• o Deploy, configure and maintain network vulnerability scanners
• o Maintain and configure schedules for Vulnerability and Pen testing Scans
• Zero-Day vulnerability research and information sharing
• Writing Zero Day Alerts
• Assist Marketing with product demos as required.

Core Requirements:

• A Security+ Certification or equivalent must be achieved within the first 6mos.
• Minimum of 2 years of experience in IT Security related fields
• Experience with communication and coordination skills with customers and team members is required
• Experience with virtual platforms, ESXi or Hyper-V
• Experience with Linux, Ubuntu preferred
• Experience with VUL scanners, like OpenVAS preferred
• Experience with network administration protocols preferred
• Experience with encryption types and protocols preferred
• Experience with Firewall Management, FortiGate preferred
• Experience with AI tools a plus
• Experience with scripting languages, PowerShell and/or BASH a plus
• Experience with security frameworks a plus