SOC Analyst

Shape the Future with Us.At Lubrizol were transformingthrough science sustainability and a culture of inclusion. As part of our global team youll be empowered to make a real impacton your career your community and the world around you.

The Information Security Operations Center (SOC) Analyst is responsible for detecting investigating and responding to security threats to protect enterprise systems data and infrastructure. As part of a global SOC this role focuses on operational security monitoring incident analysis and response execution while collaborating with DFIR Threat Intelligence and IT teams to continuously improve detection and response capabilities. This position is a member of the Information Technology (IT) division and reports to the Security Operations Center Manager.

• Incident Monitoring triage and response
• Execute defined incident response playbooks to investigate security incidents. This includes clear documentation of incident artifacts and business impacts/concerns.
• Support DFIR team with ad hoc security investigations as requested by Ethics HR and Legal
• Provide operational and administrative support and full product lifecycle management of security tools (e.g. CASB ITR EDR IDS/IPS XDR SIEM malware analysis web filtering etc.).
• Participate in guided and hypothesis-driven threat hunting activities as part of scheduled SOC initiatives or in response to emerging threats.
• Stay up to date with the latest security threats trends and technologies and make recommendations for enhancing security posture.
• Other information security activities as needed.

• Excellent analytical and problem-solving skills with the ability to assess complex security issues and develop effective solutions.
• Ability to build relationships and work in a collaborative matrix-driven global environment.
• Ability to analyze logs across multiple data sources (endpoint network cloud)
• Understanding of common attacker techniques (MITRE ATT&CK)
• Strong incident timeline reconstruction skills
• Comfort making decisions with incomplete information
• Sound decision making proactive/creative problem solving and strategic thinking skills.
• Must be a self-starter able to manage multiple priorities and meet deadlines while providing quality customer service to internal and external stakeholders.
• Strong written and verbal skills.
• Knowledge and experience with security access administration systems and processes
• Familiarity with industry standards and frameworks (e.g. NIST CIS Critical Security Controls SANS etc.)

Education / Certifications:

• Bachelors degree in cybersecurity or computer science or a related field with an equivalent combination of education and experience in cybersecurity

• 1 or more industry recognized cybersecurity certification (GSEC GCIH CEH etc.)

Experience:

• 6-8 years of experience in SOC incident response or security operationsfocused roles

Consider a Plus

• Scripting for automation (Python PowerShell)
• Experience supporting full vendor stack security applications such as SIEM IDS/IPS endpoint protection and vulnerability scanners.
• Familiarity with automation tools and AI-enhanced workflows
• Experience managing PAM technologies and services (e.g. BeyondTrust CyberArk HashiCorp etc.)
• Cloud Security experience preferably Azure and Defender tool set
• Project management skills to handle multiple concurrent assignments in a timely manner.

Role Scope:

• SOC Analyst

Travel:

• Very Limited; < 15%

Work Hours:

• M-F 1st shift / Flextime 9-6

Physical Demands:

• General office-type activity