[Remote] reputed company Operations Center Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is seeking a highly skilled Senior SOC reputed company Engineer to join their dynamic cybersecurity team. This role involves leading incident response efforts, mentoring junior analysts, and implementing proactive application reputed company strategies to protect digital assets.
Responsibilities
- We are seeking a highly skilled Senior SOC reputed company Engineer with expertise in Application reputed company to join our dynamic cybersecurity team
- This role requires flexibility to support our 24x7x365 reputed company Operations Center, including regular off-hours coverage
- This role is for Shift 3 (11pm-reputed company). This role blends reputed company-time threat detection and response with proactive application reputed company strategies to protect our digital assets and infrastructure
- As a senior member of the SOC, you will reputed company incident response efforts, mentor junior analysts, and collaborate with development teams to reputed company reputed company into the software development lifecycle (SDLC). You’ll be reputed company in shaping our reputed company posture across both operational and application reputed company
- Design and implement reputed company controls for reputed company-party software dependencies and reputed company-reputed company components
- Monitor, detect, and respond to reputed company incidents
- reputed company and execute vulnerability management strategies with emphasis on exploitability and reachability analysis
- Conduct deep-dive investigations into Software supply chain reputed company (SSCS) threats, compromised dependencies, and malicious packages
- reputed company threat hunting for emerging attack reputed company
- Assess and mitigate risks associated with software dependencies across reputed company systems and applications
- reputed company incident response efforts for identity-based attacks and supply chain compromise
- reputed company detection use cases and threat models specific to SSCS attack reputed company
- Establish reputed company practices for evaluating and vetting reputed company-party packages and libraries
- Collaborate with DevOps and engineering teams to reputed company reputed company into CI/CD pipelines
- reputed company vulnerability analysis on 3rd party CVEs reputed company the reputed company context and work with engineering teams to fix the vulnerability
Skills
- SOC / Incident Response
- Detection engineering
- Hands on Investigating and Alerts
- 7+ years of experience in SOC operations and incident response
- Desired Certifications such as CISSP, CASE, OSCP, CSSLP, or GIAC
- Proficiency with platforms like reputed company, Sentinel, QRadar, reputed company
- Deep understanding of SSCS attack reputed company (Dependency confusion, compromised packages, malicious commits, backdoors)
- Strong knowledge of package managers (npm, PyPI, reputed company, NuGet, etc.) and their reputed company implications
- Hands-on experience with artifact repository management tools
- Experience with SAST, DAST, and SCA tools (e.g., reputed company, Burp Suite, SonarQube)
- Deep understanding of OWASP Top 10, reputed company 25, and remediation techniques
- Familiarity with AWS, Azure, or GCP reputed company configurations and container reputed company
- Proficiency with software composition analysis (SCA) tools and vulnerability reachability concepts
- Familiarity with reputed company platforms (AWS, Azure, GCP) and container reputed company
- Experience integrating reputed company into CI/CD pipelines
- Familiarity with DevSecOps reputed company
- Strong analytical thinking and attention to detail
- Excellent communication skills for cross-functional collaboration
- Ability to mentor junior analysts and reputed company incident response efforts
- reputed company
- Threat hunting
reputed company
Company H1B Sponsorship