SoC Senior

Analyzing and creating remediation strategies for vulnerability management programs.

Develop security analysis documentation and recommended remediation actions.

Implement and maintaining security solutions, tools, and IT Policies and standards.

Understanding of networking protocols, including (e.g., TCP/IP, SNMP, DNS).

Knowledge of authentication and authorization mechanisms, identity access management, cloud identity management, user provisioning best practices.

Technical engineering capabilities that include Windows Servers and other common server platforms such as VMware, Active Directory, File, IIS, SQL, SCCM, WSUS, and others.

Experience using Microsoft 365 services and Azure security controls and technology.

Proficiency in using various security tools, but not limited to, SIEMS, Qualys, Metasploit, Nipper, Kali, etc.

Familiarity with industry standards such as PCI DSS, HIPAA\HiTech\HiTrust, CIS Critical Controls, NIST, OWASP

Provide training and mentoring to other SOC team members.

Identify and develop solutions to help enable the SOC to be more efficient.

Ensure data collection is occurring with all tools for on premises equipment, networking, and cloud infrastructure. Monitoring the SIEM for activities related to security issues

Ability to prioritize effectively and handle shifting priorities professionally

Monitor, analyze, classify / prioritize, investigate, respond, document, and report on information security issues and emerging trends

Experience in creating, documenting, and maintaining policies, procedures, and workflows is strongly preferred.

Proficient in Incident Management and Response Knowledge of security concepts such as cyber - attack techniques, threat vectors, risk management, and incident management Experience operating or maintaining data collection tools and troubleshooting the ingestion of data sources such as Syslog, event log agents, APIs, event hubs. Experience with query languages such as SQL and KQL. Windows / Linux System Administration

Networking / Firewall experience. Identity and Access management experience. Troubleshooting capabilities.

Experience in analyzing and creating remediation strategies for vulnerability management programs.

Experience developing security analysis documentation and recommended remediation actions

Skills:

• Cloud Computing
• Unix
• Wintel/Windows Server

.