Security Operations Center (SOC) Analyst, Tier 2 in Provectus

Provectus is a global technology consulting firm and AWS Premier Partner, that designs and builds solutions for industry-specific use cases, leveraging expertise in data, machine learning, and cloud technologies while fostering a collaborative and inclusive culture.We are seeking a dedicated and proactive Security Operations Center (SOC) Analyst to join our dynamic SOC team. As a Tier 2 SOC Analyst, your role is pivotal in enhancing the security posture. You'll leverage your expertise to monitor and analyze security events, investigate incidents, and provide advanced threat detection and response. Collaborating closely with Tier 1 analysts and other teams, you'll triage and escalate security incidents as necessary, ensuring timely resolution and minimizing impact. Your responsibilities include fine-tuning detection mechanisms, developing playbooks, and conducting thorough forensic analysis to identify root causes and mitigate future risks.Requirements:Minimum 5 years of experience of relevant SOC work experienceBachelor’s degree in Computer Science (Computer Security/Information Security degree preferred).Desirable certifications: CySA+, eJPT, PNPT, OSCP, CISSP, CompTIA Security+, CCNA, SANs GSEC, GCIH, GCIA, EC Council C|EH (one or more).Good knowledge of UNIX Shells, NAC, SIEM, CASB, SOAR, EDR, FW, IPS/IDS, and SandboxesMust be familiar with the following: Permissions management, DLP, Active Directory, and VPNHands-on experience with Anti-Virus, Firewalls, Phishing mitigation, and Wireshark, Syslog, and network log formatsKnowledge of network and common protocolsScripting experience with PowerShell, Bash, Java, or PythonExperience with root cause analysisStrong verbal and written communication skills with the ability to articulate complex ideas in easy-to-comprehend business termsAble to organize and prioritize, completing tasks to tight deadlinesComfortable taking ownership of own work, identifying the need for action whilst working effectively within a teamAt least Intermediate level of EnglishResponsibilities:Monitor network, security, system, and cloud environments for events and perform triage analysis to identify or prevent incidents; perform network, security, system, and cloud incident response as neededMonitor dashboards for malicious events, phishing events, spoofing events, DDoS attacks, SQL Injection events, network connectivity events, system/device performance events, and other potentially high-risk incidentsIdentify suspicious/malicious activityPerform static and dynamic malware analysisPerform offensive and defensive testing in virtual environmentsRespond promptly and effectively to security incidents and threats discovered by SOC Analyst Level I and carry out effective Level II analysis of incidentsPerform incident detection, response & remediation, threat hunting, digital forensics, and configure alerting rulesDeep analysis of network and endpoint data to detect and mitigate potential risksAccurately document cases during investigations and effectively communicate findings to Level I Analyst or escalation team to ensure complete handover of work streamsGenerate quality technical reports containing methodologies, findings, and recommendations Continuously improve incident management processes through periodic threat hunting exercises, knowledge optimization effort building, and by comprehensive diagnosis and analysis of incident trends Work with external stakeholders to understand operational needs and develop effective processes Show more Show less Position level Assistant Type of employment Full-time Job responsibilities Finance and Consulting Industries Financial services and Hospitals and health care