drjobs SOC Security Operations Center Senior Threat Analyst 2 - Specialist 2

SOC Security Operations Center Senior Threat Analyst 2 - Specialist 2

Employer Active

1 Vacancy
The job posting is outdated and position may be filled
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Brooklyn, NY - USA

Monthly Salary drjobs

Not Disclosed

drjobs

Salary Not Disclosed

Vacancy

1 Vacancy

Job Description

Client Name: City of New York

Start Date: October 7 2024

End Date: October 4 2026

Contract Length (in weeks): 104


SCOPE OF SERVICES

TASKS:
  • Perform many critical functions within the Threat Management discipline including staffing24x7x365 coverage at the Citys Security Operations Center (SOC) augmenting FTE shiftschedules including days nights weekends and holidays.
  • Interface with Clients Cyber Command teams internally with City agencies vendors andinformationsharing partners.
  • Monitor City networks and security alerts for intrusion attempted compromise andanomalous behavior; apply mitigation techniques or escalation factors; correlate threatintelligence across various logs collected by established security controls.
  • Produce routine SOC metrics & reporting.
  • Maintain situation reports (SITREPS)
  • Perform weekly quality control checks.
  • Works closely with SOC Director on incident preparation including the continuousdevelopment of new SOC playbooks and runbooks.


Requirements

MANDATORY SKILLS/EXPERIENCE

Note: Candidates who do not have the mandatory skills will not be considered

Minimum 8 years of experience in Threat Management/SOC/Incident Response environment.
  • For this senior position leadership skills are a must including the ability to lead and mentor junior analysts coordinate team activities and manage SOC operations effectively.
  • Prior experience working in a SOC environment is mandatory. This includes familiarity withSOC operations procedures and tools such as SIEM (Security Information and EventManagement) systems intrusion detection/prevention systems (IDS/IPS) and endpointdetection and response (EDR) tools.
DESIRABLE SKILLS/EXPERIENCE:
  • Knowledge of cybersecurity principles practices and procedures
  • Strong understanding of network and host technologies
  • Experience applying techniques for detecting host and networkbased intrusion using IDSmethods and technologies.
  • Experience with SIEM technologies malware analysis and mitigation techniques
  • Apply cybersecurity and privacy principles to organizational requirements (confidentialityintegrity availability authentication nonrepudiation)
  • Interpret information collected by diagnostic network tools (Netflow security event logsIDS systems etc.
  • Ability to investigate and solve complex problems.
  • Excellent communication skills are crucial for effectively communicating security incidentsrisks and recommendations to technical and nontechnical stakeholders including SOCDirector and senior management.
  • Threat Hunting: Proactive threat hunting capabilities to identify and investigate potentialsecurity threats or anomalies within the environment before they escalate into incidents.
  • Incident Response: Experience in incident response procedures and methodologiesincluding the ability to analyze security incidents contain threats mitigate risks andrecover from security breaches effectively and efficiently.

SPECIAL REQUIREMENTS:
***Candidate must be willing to work days nights and/or weekends depending on coverage or critical incident response needs***


Required Experience:

Senior IC

Employment Type

Contract

Company Industry

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.