- +3
- +7
- Irvine, California
About
Information Technology
Job Description
Position Title: Sr. SOC Analyst
Location: Irvine, CA
Reports To: SOC Manager
Salary:$100K
Status: Exempt
General Position Summary
This position is responsible for providing advanced-level security monitoring services to client companies by gathering security events from security devices, network devices and computers in customer network to security monitoring system in a data center. This senior role is also accountable for developing SIEM contents and tools to enhance the SOC capabilities.
Essential Job Functions
PRIMARY RESPONSIBILITIES
Provide 24x7 monitoring and analysis of SIEM events to identify potential security risks and vulnerabilities.
Coordinate and collaborate with others for the investigation, remediation, and implementation of preventative measures for cybersecurity events and incidents.
Manage escalations received from Tier I SOC Analysts .
Triage and investigate events to identify security incidents.
Provide detailed analysis of security events and investigations.
Recommend actions to customers for cybersecurity events and incidents .
Log security incidents in the case management system, managing security incidents throughout their lifecycle to closure.
Develop SIEM contents and other programs to enhance the SOC efficiency and detection capability.
Enhance existing programs, troubleshooting as necessary.
Develop SIEM contents such as rules, reports, etc.
Develop integration programs such as log collection scripts, remediation scripts, etc.
Serve as a subject matter expert in at least one security-related area (e.g. specific security solution, Windows, etc.).
Provide technical support for the SOC services and security products that Secure delivers.
OTHER & MISCELLANEOUS
Provide coaching, training, and support development of documentation for Tier I SOC Analysts.
Manage stakeholders' expectations and relationships in pre-sales and post-sales activities including onsite visits.
Provide routine reporting to customers.
Seek constant improvement, more efficient, and less expensive ways and means in work processes.
Perform maintenance and enhancement of the SOC service such as maintenance and enhancement of SIEM contents, SOC documents, SOC tools, and SOC infrastructure.
Qualifications
Education & Work Experience
- At least 4 years of experience as a SOC analyst, including event triage and incident management.
- Prior experience with SIEM tuning and administration .
- Proficiency in popular coding languages including Python, Java and C++ and frameworks.
- Relevant cybersecurity experience including SIEM operations, forensic acquisition and analysis of evidence, event management, and incident management.
- Demonstrated experience with leading incident response calls, meetings, and activities by providing direction to other team members and partner vendors.
- Ability to multitask, including answering multiple calls, prioritizing emails, instant messaging/chat environments, and ticket-related communications. Prior experience working in fast-paced environment with the ability to manage workloads when handling incident responses with competing priorities.
- Bachelor's degree in a relevant field of study (e.g. Cybersecurity, Information Systems, Computer Science, Security & Risk Management, etc.). Master's Degree preferred.
- Previous experience in incident investigation utilizing EDR tools.
- Advanced knowledge and strong interest in cybersecurity (attack methods, malware techniques,etc.).
- Fluent in English, both written and verbal, with excellent oral and written communication skills.
- Experience with reporting tools.
Tools & Equipment
ā¢ Software includes the use of Windows operating system, MS Office
ā¢ General office equipment including phones, fax, copier, personal computer, printer, scanner, etc.
Certificates/Licenses
- CISSP or GIAC 50X or above (required)
- MCSE, MCP, CCNA, Security +, preferred
Work Environment & Physical Demands
Work Environment
Work is performed in an office environment. Travel may be required. Ability to work any shift pattern within the 24/7/365 operation including days, nights, holidays and weekends, required.
Physical Demands
While performing the duties of this position, the employee is required to frequently sit and occasionally must stand, walk, use hands and fingers and reach with hands and arms. The employee may occasionally lift and/or move up to 50 pounds.
Specific vision abilities include the ability to read and analyze data in hard copy and on a computer screen, measure or identify using eyesight and adjust vision focus.
To apply, please send resume to
#LI-TS1S
Job Details
City: Irvine
State: CA
Job Type: Permanent Job
Salary High:
Salary Low: 100000.00
Languages: English
Hours of Operation: Minimum of 8 hours per day.Work is shift-based and rotated. Summer time 8am start (1hr meal break) or 12pm start (1hr meal break) Winter time 7am start (1hr meal break) or 11am start (1hr meal break)-Weekend work is required 2-3 times per month.
Benefits: Health Ins;Dental Ins;Vision Ins;401K
Contact Information
Job Owner: Tomoko Sakiyama
Job Owner Email :
Nice-to-have skills
- Python
- Java
- C++
- Windows
- CISSP
- MCSE
- CCNA
Work experience
- Cyber Security Specialist
- Security Analyst
- Security Architect
Languages
- English