Lead Security Operations Center Analyst

Description

• Ensure the SOC operates in compliance with relevant security standards, regulations, and policies.
• Analyze and interpret threat intelligence. Develop and implement strategies to protect the organization from cyber threats.
• Mentor and support security analysts, engineers, and other team members to foster professional growth and development.
• Serve as the CSOC Tier 3 SME/Analyst, providing advanced technical guidance.
• Conducting regular security awareness training for employees to enhance the overall security posture of the organization.
• Suggest SOC process, workflows, and playbooks improvement to streamline incident response and enhance overall security operations.
• Provide briefing to customer leadership on Threat incidents, mitigation approaches and solutions that will limit or reduce such risks in future.
• Perform digital forensics and threat hunting. Lead the team in analyzing and containing the threat, mitigating the impact, and initiating recovery procedures.
• Keeping abreast of the latest security threats, vulnerabilities, and attack techniques is essential. You will be responsible for integrating threat intelligence into your SOC's processes and ensuring the team is well-informed about emerging risks.
• Recruit top talent and assemble a team of dedicated security professionals. Provide thorough training to equip your team with the latest cybersecurity knowledge and skills.

Requirements

• Experience with digital forensics and process
• 5+ years of experience within a cybersecurity environment; experience in a leadership role is preferred.
• Knowledge of Splunk, Crowdstrike, tenable, forescout, Xscalar, BigFix, MS360, Encase, Fireeye, Cortex SOAR XDR, Prisma or similar products in security realm.
• Experience in SOC Tier 3, managing a team of individuals.
• Bachelors in information technology, Computer Science, or a related field; or relevant, commensurate work experience
• Endpoint and network security experience required; IDS, IPS, EDR, ATP, Malware defenses and monitoring experience. Knowledge of MITRE ATTACK framework.
• Experience in a security operations center, or similar environment, and identifying indications of compromise or attack and responding to incidents.
• Prior experience leading a Team of Tier 1 and Tier 2 Analysts
• CISSP, Network+, CEH, SANS FOR578: Cyber Threat Intelligence, SANS FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics, Splunk Core Certified Advanced Power User, Splunk Administrator, and Splunk SOAR administrator.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance