Sr. SOC Analyst

• Lead complex security incident responses, from post-breach analysis to threat actor identification, leveraging netflow, PCAP analysis, and security event logs to identify and mitigate lateral movements and escalations
• Demonstrate proficiency in writing and understanding Snort (or Defender) rules, with a strong capability in utilizing SIEM tools, specifically Splunk, for detailed incident analysis and resolution
• Engage in proactive threat hunting, leveraging network data, netflows, and PCAPs for detailed analysis, and employing log information analysis (sysmon, event ID, registry rights) to preemptively identify and neutralize threats
• Interacts with the team daily to deliver on the customer’s requirements
• Communicates with the team and other work centers to secure the customer’s cloud and on-prem environments
• Able to work on a team that supports a mission focused customer with high expectations
• Triages and resolves events and incidents successfully defending the customer’s environments with multiple boundaries
• Utilizes technical knowledge, interpersonal skills and grit to solve challenging operational requirements

• 5+ years of SOC experience
• Bachelors Degree in Cybersecurity or related field
• Security+ or equivalent certification
• Active TS/SCI Clearance

Medical, Dental, Vision, 401K, PTO, Sick Leave if Required by Law