SOC Security Analyst - Level 1 in Coretek

Join a highly skilled and motivated team of Cyber Security Professionals tasked with protecting Coretek and its customers. The Cyber Security Analyst level 1 is an entry level role that is primarily focused on responding to alerts, setting up cases for escalation, and triage. Analysts will leverage Microsoft Sentinel as well as, cyber case management and supplementary tools to investigate, contain, and remediate cyber security incidents. The Cyber Security Analyst must have a drive to learn and grow as the industry changes and Coretek adapts rapidly.Coretek understands that a candidate may not possess all the skills required of a Security Analyst for the unique service provider space and will educate and grow the right candidate. At Coretek the desire to learn and work with in a team is a requirement of the position. Skills in other disciplines are always welcome and shows a candidate’s ability to adapt. Those with formal education are welcomed as well as those that are self-taught. Structured training as well as on the job experience is a required part of the job to bring security professionals up to speed for the complex requirements and fast paced environment of a service provider. Security Analysts must have a drive to learn and grow as the industry changes and Coretek adapts.ESSENTIAL FUNCTIONS:Respond to alerts and validate findingsEscalate security incidents incident response teams for investigation / remediationSupport Incident Response investigations for Coretek and Coretek customersLearn to perform analysis of logs and alertsCoordinate with appropriate teams to provide incident handling and response supportLearn to use and improve incident response procedures & runbooksHandle security incident escalation via Cyber Case Management tools, SIEM, ITSM, email, phone, or walk-upRequirementsMINIMUM QUALIFICATIONS:Knowledge of incident response, investigation, system forensics, or related cyber security education / self-learningFamiliarity with Windows and Linux operating systems including command line operationPossess a foundation in networking fundamentals and TCP/IPKnowledge of common network-based services and common client/server applicationsExcellent verbal/written communication, interpersonal and organizational skillsCommunicate effectively with varied levels of staff to develop positive working relationshipsExcellent problem-solving skills to diagnose technical issuesManage customer situations professionally to aid in positive customer satisfactionAbility to learn new technology and concepts quicklyAbility to work on a shift or on-call rotation if neededFormal education or certifications in incident response, forensics, cyber security case management, IT technology, networking, or related topicsExperience working on a security operations teamExperience reviewing and analyzing log data from various network and security devicesExperience with well-known information security related tools for packet capture, network/OS fingerprinting, and communicationPractical understanding of exploits, vulnerabilities, computer network intrusions, adversary tactics, exfiltration techniques and common knowledgeExperience with enterprise SIEM productsExperience with ITSM, SOAR, or Cyber Case Management ToolsScripting with Python, Perl, Bash and/or PowerShell a plusDatabase structures and queries, Regular Expressions a plusExperience acquiring and analyzing data from clients and servers related to security incident responseDigital Forensic or Threat Intelligence workPREFERRED QUALIFICATIONS:Formal education or certifications in incident response, forensics, cyber security case management, IT technology, networking, or related topicsExperience working on a security operations teamExperience reviewing and analyzing log data from various network and security devicesExperience with well-known information security related tools for packet capture, network/OS fingerprinting, and communicationPractical understanding of exploits, vulnerabilities, computer network intrusions, adversary tactics, exfiltration techniques and common knowledgeExperience with enterprise SIEM productsExperience with ITSM, SOAR, or Cyber Case Management ToolsScripting with Python, Perl, Bash and/or PowerShell a plusDatabase structures and queries, Regular Expressions a plusExperience acquiring and analyzing data from clients and servers related to security incident responseDigital Forensic or Threat Intelligence workEDUCATION and TRAINING:Degree in technology, cyber security, criminal justice/forensics, or equivalent work experienceSecurity related certifications desired Show more Show less Должностной уровень Руководитель среднего звена Тип занятости Полный рабочий день Должностные обязанности Информационные технологии Отрасли Технологии, информационные средства и Интернет