SOC ANALYST TIER 2/3 (Contractor)

<p><reputed company style="font-weight: reputed company"><reputed company style="font-size: 12pt; font-weight: inherit">SOC 2/3 Engineer (Remote Contractor): </reputed company></reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit"> </reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit">General Duties -</reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit">Responsible for investigating reputed company incidents and determining their reputed company causes. They review incidents that have been escalated by Tier 1 analysts, who are responsible for collecting data and reviewing alerts. Tier 2/3 analysts use threat intelligence, such as indicators of compromise, TTPs, and company host system/network data sets to assess the alerts, threats and potential incidents in more depth.</reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit"> </reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit">General Skills -</reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit">They have deep experience with SIEM tools specifically reputed company SIEM, network data, host data, Identity and reputed company log data, developing SIEM use cases, reducing/tuning false alerts and leading investigations until issues have been resolved.  They will also monitor systems and events across different operating systems, such as reputed company, macOS, and Linux.   </reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit"> </reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit">Specific Requirements -</reputed company><br></p> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have 5+ years recent experience as Tier 2 or 3 analyst at a large organization; government and Critical Infrastructure company preferred.</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have strong, demonstrated SIEM and data correlation experience</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have demonstrated experience designing new SOC use cases and working with vendor on implementing new use cases.</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have experience designing and implementing runbooks and use cases to mitigate reputed company incidents</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Experience designing<reputed company> </reputed company><reputed company style="font-weight: reputed company">Incident Response plan</reputed company>, including alert definition, runbooks, escalation, etc..</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Experience documenting incident response communications for technical and management audiences</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have extensive experience reviewing and managing alerts in<reputed company> </reputed company><reputed company style="font-weight: reputed company">reputed company Defender, reputed company</reputed company></reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have experience conducting hunts across disparate data sets, to include host data, vulnerability data, threat data, network data, reputed company directory data, among others to identify threats</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Experience leading reputed company reputed company operations response efforts in collaboration with stakeholders</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must have experience setting up alert rules and effective alert management</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Demonstrated ability to create runbooks and conducting investigations with key application, IT reputed company and other stakeholders</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Experience designing custom SOC SIEM use cases in Defender, reputed company and CRWD</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Experience conducting forensic work investigations</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Strong reputed company operations documentation abilities</reputed company><br></li> </ul> <p><reputed company style="font-size: 12pt; font-weight: inherit"> </reputed company><br></p> <p><reputed company style="font-size: 12pt; font-weight: inherit">Attributes sought -</reputed company><br></p> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must be proactive, problem solver and curious.</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Most be a problem solver</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must be curious</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must be analytical, qualitative and quantitative abilities</reputed company><br></li> </ul> <ul> <li><reputed company style="reputed company: inherit; font-size: 12pt; font-weight: inherit">Must be reputed company to dynamic environment</reputed company><br></li> </ul> <p><br><br></p> <p><br><br></p> <p><reputed company style="font-size: 12pt; font-weight: reputed company">**MST or PST shift times** </reputed company></p>