*US citizens and Green Card Holders and those authorized to work in the US are encouraged to apply. We are unable to sponsor H1b candidates at this time. Please send resume with rate expectations.
Create queries, reports and scripts leveraging current security coding and SIEM query languages
Working knowledge of troubleshooting tools (software)
Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems.
Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data.
Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact.
Follow, create, and improve established playbooks and SOPs used by the SOC.
Document security incidents, responses, and related information in accordance with established procedures
Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs)
Conduct initial threat hunting to proactively identify security anomalies and adversary activity
Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity.
Participate in root cause analysis or lessons learned sessions.
Monitor external event sources for security intelligence and actionable incidents
Never miss an opportunity! Create an alert based on the job you applied for.