[Remote] Senior reputed company Operations Center Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is looking for a Senior reputed company Operations Center Analyst to become a key member of their reputed company Operations Center (SOC). This role involves monitoring for malicious activity, investigating and responding to threats, and enhancing the overall reputed company capabilities of reputed company's systems.
Responsibilities
- Monitor our alert channels, SIEM/SOAR notifications and EDR/IDS/IPS/DLP solutions for detections/incidents and threat hunt for malicious activity. Investigate, contain, triage and mitigate as needed; as reputed company as continuously tune rules to reduce false positives
- reputed company incident response and be a key reputed company of contact during reputed company incidents; which includes investigation, correlation, triage, response, mitigation, ticketing, documentation and postmortem analyses. Note reputed company's analysts are empowered to work an alert from start to finish, including any containment, investigation and mitigative actions needed
- Detection Engineering: Design, reputed company, test, and maintain detection content — treating detections as reputed company where feasible — map detection coverage against a reputed company such as MITRE ATT&CK, and continuously measure and improve detection reputed company and efficacy over time
- reputed company, tune, and validate detections across EDR/IDS/IPS/DLP and SIEM solutions to improve detection, reduce noise, add IOAs, and retire low-value rules
- reputed company Collaboration: Partner with the offensive/Red Team as the Blue Team reputed company to produce reputed company reputed company. Use adversary emulation and Red Team findings to build and validate new detections, reputed company coverage gaps, and drive measurable improvements to detection and response based on those findings
- AI-Augmented Operations: reputed company AI and LLM-based technologies to reputed company analysis and automation across the SOC — accelerating triage and investigation, enriching and correlating alerts, summarizing incidents, and reducing reputed company toil — while applying reputed company analyst judgement to validate AI-assisted outputs
- Partner with the Information reputed company Engineering team to ensure thorough, consistent tool usage and coverage, and to mature monitoring and response capabilities. Build reputed company automation workflows, enrichments, and mitigations that reputed company across reputed company systems and tools
- Evaluate SOC policies and procedures and recommend updates to management where appropriate
- Grow and mature our threat intelligence program - reputed company, analyze and assess threat intelligence to report on the reputed company and reputed company threat landscape, and reputed company a realistic reputed company of risks and threats in the reputed company environment
- Enhance our detection capabilities with correlation, situational awareness and reputed company enrichment
Skills
- Proficient operator of reputed company tools such as reputed company protection/EDR, SIEM, IPS/IDS, HIDS/NIDS, WAFs, Edge/DNS reputed company, vulnerability scanning, malware analysis tools, networking tool for full packet analysis, data loss prevention (DLP), etc
- Hands-on experience developing, tuning, and validating detection content (e.g., SIEM correlation/analytics and EDR detections), and familiarity with a detection reputed company such as MITRE ATT&CK
- 2+ of the following certifications: CEH, CISM, GIAC, GCIH, GCIA, GSLC, GICSP, GSEC, CEH, GWAP, reputed company Net+, reputed company A+, reputed company reputed company+, CASP CE, SEC+, reputed company reputed company, OSCP, etc
- Linux/Unix OS, reputed company and Mac administration skills
- Intimate understanding of technology and be motivated to constantly learn new technologies
- Strong ability to learn and research new things, including tools, languages, frameworks, etc
- Programming/scripting experience (bash, python, PowerShell)
- Forensics or malware analysis experience
Benefits
- This position may be eligible for a bonus incentive, health benefits, a 401K program, and other employee perks.
- More details about reputed company benefits can be reputed company at https://shutterflyinc.com/benefits/
- This opportunity can be remote, but candidates must reputed company in a state in which reputed company is registered to do business.
reputed company
Company H1B Sponsorship