SOC Analyst

Job Title: Security Operations Center (SOC) Tier 1 Analyst (Onsite)

Location: Cincinnati, Ohio 45202

Contract: 5+ Months (Long Term Contract)

Working Mode: Onsite

JOB DESCRIPTION:

Summary/Basic Purpose:

• The Security Operations Center is responsible for providing 24/7, 365 monitoring, detection, and response capabilities for Comerica. This includes event, cloud security, and DLP monitoring, as well as a role in the incident response process. The Tier 1 SOC analyst primarily serves as the initial triage and investigation point for the SOC and would escalate incidents on an as needed basis.
• The Tier 1 Security Operation Center (SOC) Analyst is responsible for proactively monitoring and performing initial triage / investigation of security incidents and alerts to identify any malicious activity. Besides the initial triage and investigation, Tier 1 Analysts are expected to escalate security incidents according to defined escalation policies to Tier 2, Tier 3, and SOC leadership for further investigation / response.

Essential Duties/Responsibilities:

Duties/Responsibilities:

SOC Analysis: 80%

• Monitor security incidents for, endpoints, network, and cloud domains, being generated by the SIEM tool and ticketing system.
• Initial triage and investigation of incidents assigned through the ticketing system, following established playbooks for specific incident types.
• Respond, mitigate, and eradicate security threats, with guidance from Tier 2, Tier 3 analysts, as well as SOC leadership.

Documentation and Support: 10%

• Provide consistent and quality documentation of actions taken to triage / investigate incidents.
• Assist senior staff in development of documentation / knowledge management articles for the SOC.
• Handle sensitive information in accordance with the Corporate Information Protection Policy.
• Collaborate with other Engineering and Operations teams to troubleshoot, respond, and improve detection capabilities.

Other duties as assigned: 10%

Total: 100%

Physical Demands and Working Conditions:

• Identify and distinguish colors and shapes in either physical and/or digital format: Occasional
• Maintain a stationary position: Frequent
• Operate office machinery including but not limited to computers, printers, scanners, phones, etc.: Frequent
• Move through work location to access files, machinery, or other items to complete a job/task: Occasional
• Move and/or position 0-20 pounds: Occasional
• Move and/or position over 20 pounds: Never
• Position self to work environment based on task assigned such as filing in high or low cabinets: Occasional
• Ability to count and handle currency and coinage: Never
• Travel required: Never

Qualifications:

Education Requirements

Minimum:

• High School Diploma/GED
• With 2 years of relevant and/or transferable experience

OR

Preferred:

• 4-year Bachelor''s Degree
• Degree in Computer Science, Engineering, Information Systems, Cyber Security, or an equivalent degree.

Minimum Experience

• 2 years of transferable and/or relevant work experience
• Less than 1 year of experience using various operating systems and industry-standard monitoring, logging, alerting, and investigation processes

Licenses/Certifications

Preferred:

• Foundational Cybersecurity/IT certifications, such as:
• CompTIA Network+
• CompTIA Security+
• GCIA
• GCIH
• GREM
• GPEN

Job Specific Knowledge/Skills:

• Solid understanding of Cybersecurity concepts and frameworks.
• Proven, excellent analytical skills.
• Working knowledge in the use of tools such as SIEM / IT Ticketing technologies, EDR, Email Gateway’s, Malware Analysis Sandbox.
• Understanding of networking (TCP/IP networks and protocols) concepts.
• Understanding of phishing and malware techniques
• Strong written and oral communication, documentation, and organizational skills.