SOC Security Engineer

View full description

Requirements:

• Bachelor’s Degree in Cybersecurity related field preferred.
• 2+ years of Cybersecurity experience.
• Significant experience using one SIEM platform such as Splunk or Elastic Search.
• Must have experience with IDS/IPS tools like Snort, Suricata, or Zeek.
• 1+ years experience with Python and Git.
• Advanced knowledge of log analysis, PCAP analysis, and traffic flow analysis.
• Demonstrated experience with computer networking systems.
• Knowledge of operational security and incident response.
• Understanding of networking protocols and infrastructure designs.
• Familiarity with TTPs of current APT threats and working knowledge of the Cyber Kill Chain and MITRE ATT&CK Matrix.
• Excellent written and verbal communication skills and analytical ability.
• Experience with DevSecOps is desirable.

Responsibilities:

• Configure tools and detect patterns/outliers within client environments matching tactics, techniques or procedures (TTPs) of known threat actors.
• Monitor security tools in multiple client environments to ensure operational effectiveness.
• Contribute to executive summary reports and delivery of detection/prevention for customers.
• Design, develop, and manage the DevSecOps process for emerging threats.
• Provide cross-functional support of the DevSecOps process.
• Collaborate with the threat team for quality service delivery.
• Act as subject matter expert (SME) point of contact for clients during business hours.
• Oversee the DevSecOps Documentation and Training.