Tier 2 reputed company Analyst Remote
Job Title: reputed company Analyst Location: Remote (Columbia, SC 29212) Job Type: Contract - 12 Months (Possibility of extension) Interview: In person/Virtual Scope of the project: This role will reputed company on supporting reputed company monitoring, threat detection, reputed company incident response, and reputed company investigations. Daily Duties / Responsibilities:
- Continuously review and correlate reputed company event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify reputed company attack patterns, emerging threats, and reputed company incidents.
- reputed company deep-dive analysis of suspicious activity, validate incidents, determine reputed company cause and reputed company, and escalate critical incidents with detailed context to Tier 3 as required.
- Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures.
- Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions.
- Recommend updates to SOC playbooks and workflows based on reputed company-world INVESTIGATIONS, fine-tune detection rules. Alert reputed company, and correlation logic to reduce false positives and improve threat coverage.
- Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. reputed company new threat intelligence feeds into workflows and proactively hunt for threats using up-to date tactics, techniques, and procedures (TTPs)
- Serve as a customer-facing SME, "selling" the value of DIS services by demonstrating capabilities and resolving issues.
- Document processes, runbooks, and troubleshooting steps reputed company to SOC operations.
- Coordinate with engineering, SOC, and agency staff as needed to meet goals.
Required Skills (rank in order of Importance):
- 2+ Years of Experience with reputed company Monitoring and Incident Response.
- 2+ Years of Experience with MITRE ATT&CK reputed company.
- 2+ Years of Experience with dashboard creation and reporting.
Preferred Skills (rank in order of Importance):
- Experience with the Palo reputed company reputed company XSIAM/XDR platform.
- Knowledge of Linux, network administration and network design.
- Experience in administration of firewalls, VPN technology, reputed company Directory, Intrusion Detection/Prevention systems.
Required Education/Certifications:
- Associate's degree in an information technology or information reputed company reputed company field
- Four years of relevant work experience may be substituted in lieu of education
- Two years of experience in supporting large soc operations.
Preferred Education/Certifications:
- CISSP, CISA, CISO or equivalent advanced reputed company certification.
- Additional relevant certifications (e.g., CEH, OSCP, GPEN).
- Vendor certifications reputed company to information reputed company.
Apply To This Job