Description: The Security Analyst I role is a critical position within the organization. The primary function of the role will be to provide monitoring of deployed customer environments for security events. This includes establishing the extent of a threat, the business impact, and advising the most suitable course of action to contain and remedy the event. A Cybersecurity Technician will serve as an escalation point to the subject matter expert for in-depth cybersecurity events and must be able to communicate effectively to all stakeholders during the event management process. Responsibilities: Manage the security event monitoring and incident response ticket queues and triage as appropriate to meet the established service level agreementsPromptly transfer cybersecurity tickets to the client or internal point of contactClearly convey indicators of compromise, isolation, and remediation stepsAnalyze and interpret system, security, and application logs in order to diagnose faults, spot abnormal behavior, and rule out false positivesEffectively utilize End Detection and Response tools to investigate alerts, anomalies, and build accurate timelines related to possible compromiseFollow established procedures to investigate, escalate, contain, or eradicate malicious activityDevelop and deliver written and oral reports to clients, teammates, and management to aggregate and communicate security information and metricsProvide input and recommendations to improve internal processes and procedures related to SOC duties and responsibilitiesParticipate in threat-hunting activities and other special projects as requiredUnderstand and follow, our set of standards and processes that produce a predictable result for the client. You must be aware of and maintain our standards.Additional Responsibilities: Maintain accurate and real-time timesheets, record complete and accurate notes of troubleshooting and communication with clientsReceive mentoring and feedback from peers and othersWhere appropriate, escalate complicated issues to a more senior resource or other appropriate teamsReview Tickets with ManagerActively Participate in Team Huddles, L10 Meetings, One on One Meetings, and any other Team MeetingsCreate and update documentation when changes occur, or when discoveries are madeAttend monthly training & team meetings as requiredAdditional duties as requiredRequirementsQualifications: Two years work experience in the Information Security or related fieldsTwo or more current security-related industry certificationsExperience with SIEM platforms, firewall management, and endpoint detection and response platformsOne year or more of experience with EDR solutions, ESGs, vulnerability management, and content filteringGood problem-solving and decision-making skills; ability to understand and analyze complex issuesSelf-motivated, detail-oriented, highly organized, and able to handle a variety of tasks and responsibilities in an efficient manner with a high level of qualityOne of the following certifications preferred: CompTIA Security+, CompTIA CySA+, CCNA, C|EH, SSCP, or equivalent

SOC Analyst

Emma

Responsibilities

Skills wanted:

Language(s) required:

Sadia Hamid

Vincenzo Lopez

Rayna Choudhry

About Prime System Solutions:

primesystemsolutions.com/

Admin access needed