SOC Analyst

We’re looking for a security operations analyst to join our growing SOC and security team. This position involves monitoring and analyzing security events, assisting in the implementation of security measures, auditing compliance with security policies and contributing to the overall protection of our organization's information assets. The ideal candidate is a quick learner with a passion for cybersecurity and a desire to grow in the field.

ESSENTIAL JOB FUNCTIONS/RESPONSIBILITIES

• Alert Triage: Monitoring security alerts, analyzing and prioritizing them based on potential impact and severity.
• Incident Detection and Response: Acting as Incident Owner to see incidents through the incident response lifecycle to ensure swift mitigation and recovery.
• Ensure compliance: Verify that security policies are properly enforced through vulnerability management, patch management, configuration management, etc.
• Continuous Improvement: Driving the refinement of SOC standard operating procedures, analytic rules, playbooks, and other commonly consumed SOC resources.
• Documentation and Reporting: Maintaining meticulous documentation of incidents, analysis findings, and lessons learned.
• Partner with team members to ensure data is protected from unauthorized internal and external access, modification, or disclosure
• Partner with IT staff members to provide technical security guidance and recommendations
• Support activities to foster information security awareness within the organization
• Performs other related duties and activities as required.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

QUALIFICATIONS/REQUIREMENTS

Education and Work Experience:

• Bachelor's Degree in Computer Science, MIS, Information Security or related technical field or equivalent technical capabilities

Specialized Knowledge, Skills, and/or Abilities:

• Basic knowledge and understanding of: security incident and event management (SIEM) including log monitoring and management, local area networks and firewalls, Active Directory, group policy objects, scripting, encryption, web filtering, exploits and hacker techniques, and, network and operating system security principles.
• Professional scripting experience: Python, PowerShell, or similar
• Professional experience applying cyber security fundamentals and concepts
• Experienced in installing security software and documenting security issues
• Excellent written and oral communication skills
• Desire and drive to learn, grow and develop key cyber skills and competencies
• (Preferred) Basic knowledge of IAM/IDPs and PAM
• (Preferred) Experience with AWS and/or Azure
• (Preferred) Experience with Windows, Mac OS, Unix/Linux operating systems

Other Requirements:

• Travel: 0%
• Special Work Hours: Special Work Hours: On-call rotation for incident response

We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.