Security Operations Center Analyst
On behalf of our client, Procom Services is searching for a Security Operations Center Analyst for a contract opportunity in Dallas, TX.
Security Operations Center Analyst Job Details
The Security Operations Center Analyst will be responsible for the following:
- Detection, monitoring, analysis, resolution of security incidents; participate in providing containment recommendation
- Coordinate escalations to internal support teams to ensure timely delivery of incident resolutions
- Perform network/system/application/log intrusion detection analysis and trending
- Participate in the security incident handling efforts in response to a detected incident, and coordinate with other stakeholders
- Ensure that Service Level Agreements are met
- Maintain standard operating procedures, processes and guidelines
- Automate security analysis, administration and remediation procedures, workflows and tasks
- Maintain awareness of trends in security regulatory, technology, and operational requirements
- Participate in client audits
* Shift rotation will be required for this role.
Additional responsibilities will include but are not limited to:
- Provide detection and response to security events and incidents within the various supported customer networks
- Security log management and monitoring
- Intrusion detections and prevention systems operations
- Vulnerability detection, assessment, and mitigation
- Risk assessment and deployment of security patches.
- Antivirus management and operations.
- Develop and maintaining information security metrics.
- Provide assistance to core security and incident response teams
- Enterprise encryption support
- Development and distribution of various security advisories and awareness messages
- Maintain growing knowledge of industry trends relating to security management and services.
SOC personnel will be working with enterprise forensic capable systems, log analysis systems, and network collection systems to facilitate response to incidents at a global scale. You will work with industry respected malware, network and incident response analysts to coordinate a best in class response to computer related incidents.
Security Operations Center Analyst Mandatory Skills
Requirements:
- Thirst for knowledge, inquisitive nature, keen interest in actively participating in SOC expansion
- Experience working in an IT Security Operations Centre, using SANS methodology
- Experience and knowledge of Security Information Event Management (SIEM) operations
- Experience in Intrusion Detection and Prevention Systems
- Knowledge of: TCP/IP, computer networking, routing and switching
- Experience in Linux/UNIX and Windows based devices at the System Administrator level
- System log forensics (Syslog, Event Viewer)
- Strong troubleshooting, reasoning and problem solving skills
- Team player, excellent communication skills, good time management
- Organizational skills and the ability to work autonomously with attention to processes
- Ability and willingness to think outside of the box to find creative and innovative solutions to reduce costs with a minimal impact on reliability.
- Ability to speak and communicate effectively with peers, management and clients
- Ability and experience in writing clear and concise technical documentation
- Ability to speak and write fluently
Preferred Education or Experience:
- Graduation with a degree from a recognized university with specialization in Computer Sciences or a related discipline, combined with a minimum of (1) years of directly related practical experience and demonstrated ability to carry out the functions of the job.
OR
- Completion of two years of an acceptable post-secondary educational program in Computer Sciences from a recognized community college, or in a related discipline, combined with a minimum of (2) years of directly related practical experience and demonstrated ability to carry out the functions of the job.
OR
- Minimum of (3) years of directly related practical experience within the last eight years, and demonstrated ability to carry out the functions of the job.
Preferred Skills:
- Candidate should possess an knowledge in the following technical skills: Incident Response, Log Analysis, TCP/IP, Network Traffic Analysis, Antivirus/Malware, Intrusion Detection/Prevention, Security Incident and Event Management Systems (SIEM), Packet Analysis Techniques, Event Correlation, and Incident Triage.
- Experience using ticketing systems such as Remedy
- Security certifications: SANS/GIAC (GCIH, GCIA or GCUX), CCNA, CISSP, or CISM certifications would be assets
- Knowledge of application security including web applications, web services, XML, SOA, AJAX, JSON, and web scanning tools
- Knowledge of: Strong Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) solutions
- Knowledge of NIST, PCI, HIPAA
Security Operations Center Analyst Start Date
ASAP
Security Operations Center Analyst Assignment Length
6 months
All your information will be kept confidential according to EEO guidelines. Please send your resume in Word format only.