SOC Analyst

Description

Responsibilities Technical analysis of network activity, monitors and evaluates network and system logs Analyze network flow data for anomalies and detect malicious network activity Accumulate IOCs from intel sources and configure scans across end points Analyze cyber threats, vulnerabilities and provide remediation plans Document, communicate, collaborate and transition incident details to other SOC membersSkills Operational knowledge of Splunk Experience with writing queries, parsing and correlating data Technical understanding of PaloAlto UTM, firewall, IDS and Wildfire features Strong understanding of parsing and analyzing web, system and security logs Must have knowledge of Linux/Unix skills and security specific scripting skills Familiar with Vulnerability Management, Vulnerability Scanning and Security patching Demonstrated ability to determine and oversee remediation activities Understanding of VPN infrastructure, 2FA, RSA SecurID Understand a variety of network protocols including TCP/IP, UDP, DHCP, FTP, SFTP, SNMP, SMTP, SSH, SSL, VPN, RDP, HTTP and HTTPS Operational knowledge of AWS cloud environment Knowledge of Nextgen AV, Endpoints Security, CASB DLP is huge plus Familiar with YARA, STIX, TAXII, OpenIOC