SOC Analyst I

The Security Operations Center (SOC) Analyst I provides real time security monitoring and threat hunting in our Security Operations Center. This individual will have the opportunity to work with customers across many industries by providing managed security services such as XDR, SIEM, vulnerability scanning, firewall, and end point management. This position will also provide exceptional customer service by assisting customers in identifying potential security incidents, attack sources, root causes and/or threat actors.

Roles and Responsibilities/ Essential Functions

Provides security event monitoring and analysis to identify critical cyber security events for clients. Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings). Perform event correlation using information gathered from a variety of sources to gain situational awareness and determine the effectiveness of an observed attack. Document and escalate incidents (including event’s history, status, and potential impact for further action), that may cause ongoing and immediate impact to the environment. Notify clients of suspected cyber incidents and articulate the event’s history, status, and potential impact of further action. Work with customers to validate/resolve computer security incidents and vulnerability compliance. Provides recommendations for system tuning and enhancements. Create basic Analytic rules for automation for approval. Provide basic support for SOC services including but not limited to Managed XDR, Managed EDR, Managed Security Awareness Training and Managed Vulnerability Scanning. Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources. Perform recurring customer status calls. Draft Standard Operating Procedures (SOPs) as directed. Participate in an after-hours on-call rotation.

Department: Heartland Business Systems.

ATS provider: Paylocity.