SOC Consultant

Job Description:

• 5–8+ years of cybersecurity experience, with a strong focus on Security Operations Center (SOC) and Incident Response (IR)
• 5+ years of hands-on experience with enterprise SIEM and EDR technologies, including investigation, detection, response, and endpoint telemetry analysis (e.g., CrowdStrike, Microsoft Defender)
• Experience with email security, threat investigation, and remediation, including analyzing malicious messages, attachments, URLs, and phishing campaigns (e.g., Proofpoint)
• Working knowledge of network security and firewall technologies, with the ability to review and interpret firewall configurations, policies, rules, and network traffic as part of security investigations
• Experience with Security Orchestration, Automation, and Response (SOAR), including the use of automated workflows and playbooks to support incident investigation and response
• Experience performing malware analysis and investigating suspicious files, processes, behaviors, and indicators of compromise
• Background in threat intelligence and experience contributing to SOC process improvements, SOPs, documentation, and operational procedures
• Excellent written and verbal communication skills, with the ability to clearly communicate security findings, risks, and recommendations
• Ability to hit the ground running and operate effectively within a lean, collaborative SOC team
• Ability to participate in an on-call rotation and work onsite in the NYC office as required