SOC Analyst III

Engility Corporation Cookeville , TN 38502

Posted 2 months ago

SAIC is seeking a Senior SOC Analyst (Tier 3) to join our team providing Security Operations Services for a major state & local government customer located in Texas. This position reports to our Threat Intelligence Director and is a member of the 24x7-security operations team. This senior analyst will be primarily accountable for the investigation and management of escalated events and incidents from Tiers 1 and 2, and collaboration with other technical support teams in the investigation, remediation and prevention of cybersecurity threats. Primary job responsibilities include:

  • Manage escalations for cybersecurity events and incidents received from Tier 1 & 2 staff

  • Provide detailed analysis of security events and investigations

  • Coordinate and collaborate with peer technical teams for the investigation, remediation and implementation of preventative measures for cybersecurity events and incidents

  • Act as a team supervisor for SOC operations staff

  • Perform efficiency analysis and tuning for SIEM tools including event rules and filtering, reporting, and rule management

  • Provide coaching, training, and support development of documentation for Tier 1 staff

  • Provide 24x7 monitor and analysis of SIEM events to identify potential security risks and vulnerabilities

  • Triage events and investigate to identify security incidents

  • Log security incidents in the IT ticketing system

  • Manage security incidents throughout their lifecycle to closure

  • Receive input from threat intelligence sources and analyze events to identify threats and risks

  • Provide support for routine reporting

  • Support ad-hoc data and investigation requests

  • Conduct security and vulnerability scans as directed using established processes

Required Education & Experience

  • Candidate must meet at least one of the following education & experience levels:

  • Bachelor's degree and 4 years of experience as a SOC analyst including a SIEM tool; event triage and incident management

  • AA Degree in related discipline and nine (9) years related experience

  • High School and eleven (11) years related experience

  • Experience with SIEM tuning and administration

  • Work in a team environment

  • Relevant cybersecurity experience including SIEM operations, event management and incident management

  • Cybersecurity certification (e.g. CompTIA Security , CISSP, CEH, etc)

  • Experience with SIEM tools (Splunk)

  • Excellent oral and written communication skills

  • Experience with Microsoft Office including Word and PowerPoint

Preferred Experience & Certifications

  • Experience with ITIL, ITIL certification

  • Experience with reporting and reporting tools.

icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon
lc_ad

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
SOC Analyst III

Saic

Posted 2 months ago

VIEW JOBS 4/16/2020 12:00:00 AM 2020-07-15T00:00 Job Description Description SAIC is seeking a Senior SOC Analyst (Tier 3) to join our team providing Security Operations Services for a major state & local government customer located in Texas. This position reports to our Threat Intelligence Director and is a member of the 24x7-security operations team. This senior analyst will be primarily accountable for the investigation and management of escalated events and incidents from Tiers 1 and 2, and collaboration with other technical support teams in the investigation, remediation and prevention of cybersecurity threats. Primary job responsibilities include: * Manage escalations for cybersecurity events and incidents received from Tier 1 & 2 staff * Provide detailed analysis of security events and investigations * Coordinate and collaborate with peer technical teams for the investigation, remediation and implementation of preventative measures for cybersecurity events and incidents * Act as a team supervisor for SOC operations staff * Perform efficiency analysis and tuning for SIEM tools including event rules and filtering, reporting, and rule management * Provide coaching, training, and support development of documentation for Tier 1 staff * Provide 24x7 monitor and analysis of SIEM events to identify potential security risks and vulnerabilities * Triage events and investigate to identify security incidents * Log security incidents in the IT ticketing system * Manage security incidents throughout their lifecycle to closure * Receive input from threat intelligence sources and analyze events to identify threats and risks * Provide support for routine reporting * Support ad-hoc data and investigation requests * Conduct security and vulnerability scans as directed using established processes Qualifications Required Education & Experience * Candidate must meet at least one of the following education & experience levels: * Bachelor's degree and 4 years of experience as a SOC analyst including a SIEM tool; event triage and incident management * AA Degree in related discipline and nine (9) years related experience * High School and eleven (11) years related experience * Experience with SIEM tuning and administration * Work in a team environment * Relevant cybersecurity experience including SIEM operations, event management and incident management * Cybersecurity certification (e.g. CompTIA Security+, CISSP, CEH, etc) * Experience with SIEM tools (Splunk) * Excellent oral and written communication skills * Experience with Microsoft Office including Word and PowerPoint Preferred Experience & Certifications * Experience with ITIL, ITIL certification * Experience with reporting and reporting tools. Overview SAIC is a premier technology integrator solving our nation's most complex modernization and readiness challenges. Our robust portfolio of offerings across the defense, space, civilian, and intelligence markets includes high-end solutions in engineering, IT, and mission solutions. Using our expertise in existing and emerging technologies, we integrate the best components from our own portfolio and our partner ecosystem to deliver innovative, effective, and efficient solutions. We are 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. Headquartered in Reston, Virginia, SAIC has pro forma annual revenues of nearly $6.5 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom. For SAIC benefits information, see Working at SAIC. EOE AA M/F/Vet/Disability Saic Cookeville TN

SOC Analyst III

Engility Corporation