L3 SOC Analyst Job at Hewlett Packard Enterprise (Galway)

Job Description

Managed Services Security team are made up of teams that provide remote (offsite) service; customer access, pre-sales, post-sales, and service delivery. Technical teams focus is to solve various business systems and applications problems for customers, onsite engineering personnel and Authorized Service Providers on standard, specialized or complex systems.

Job Responsibility

Monitor work queues for new escalations from the L1/L2 team
Triage cases when there are multiple escalations in the queue
Perform deep-dive analysis on escalated cases
Uses Threat intelligence and IOA/IOC data to identify source and impact of attack
Clearly document your investigations as they progress and regularly add case notes to the case to maintain situational awareness
Complete the investigations and recommend remediations for low and medium severity security incidents
Initiate a war room for confirmed or suspected critical security incidents and follow the documented incident response plan
Complete Post Incident Review (PIR) documentation for all medium and higher severity security incidents
Monitor work queues for new cases requiring review
Triage case reviews as required
Review cases completed by L1 analysts for quality, accuracy, and completeness
Immediately investigate any you suspect to be true security incident falsely closed in L1/L2
Provide feedback, guidance and mentoring to L1/L2 analysts where appropriate to improve their initial investigation skills
Recommend exceptions or changes to detection rules to reduce false-positive detection
Time permitting, perform proactive reviews of open and acknowledged events currently being triaged by the L1 team
Assist the peer L3 team in scheduled threat hunting activities
Develop queries or other methods for detecting new or previously undetected exploits, tactics, and techniques. Work with the Engineering team to implement these detections
Maintain situational awareness
Actively participate in end-of-shift handovers of ongoing and recently closed investigations
Keeping meticulous notes of investigations of confirmed and suspected security incidents
Reviewing vulnerability scan data for all customer sites monthly, and being aware of any areas of additional risk (accepted or new) to the organisation
Develop and update playbooks, KB articles and training material as appropriate
Review documentation created by L1/L2 analysts for completeness and accuracy

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent experience desired
Generally, 5+ years in SOC, Incident Response, or Threat Analysis roles
Strong knowledge & understanding of common attack vectors and threat actor tactics, techniques, and procedures
Knowledge of Elastic SIEM is preferred. If not experience on any of the other SIEM tools like Sentinel, Splunk, QRadar, LogRhythm
Relevant industry qualification where applicable
Excellent verbal and written communication skills in language to be supported
Advanced troubleshooting skills in a technical environment
Excellent analytical and problem solving skills
Advanced Software and hardware knowledge of computing, storage and peripheral devices
Specific knowledge and training with the company's products. Knowledge of multiple product lines (for example, proactive, reactive, storage, enterprise systems, tier 2 or 3 support, etc.)
Advanced proficiency with case management databases and tools
Superior customer service skills
Phone and remote support experience. E-support experience, knowledge and resolution ability
Ability to solve and document solutions for usage of other technicians and customers
Ability to mentor new agents
Ability train peers on solutions
Ability to take full ownership for resolution with escalated customers
Ability to lead technical action plans
Lead or provide expertise to teams or projects
Highly Developed knowledge of more complex solutions

What we offer

Health & Wellbeing
Personal & Professional Development
Unconditional Inclusion

Hewlett Packard Enterprise - All Job Offers

Select Country

L3 SOC Analyst

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

L3 SOC Analyst

SOC Analyst L3

L3 Security Analyst

Security Specialist Engineer

Security Consultant L3

Senior Incident Response Analyst

IT Training Lead

K Kitchen Representative

K Kitchen Representative

Our AI answers in your language