Insight Global
Sr. SOC Analyst
Insight Global, Phoenix, Arizona, United States, 85003
Job Description
Expert-level incident analysis responsible for providing guidance to the other SOC analysts
Perform threat hunting and investigations into potential threats based on log data and provide the results of the analysis to management
Provide recommendations to improve security postures across multiple environments and platforms including recommendations for design improvements and product offerings
Assist with testing and deployment of SIEM, MDR, and SOAR tools
Assist with tweaking and upkeep to ensure effective monitoring and alerting of security incidents
Write scripts to query systems for security purposes using PowerShell or Python
Monitor information on all network sites with the use of various monitoring tools
Monitor security tools for active alerts and work with the teams to resolve them
Identify and resolve or escalate any possible outages or deterioration of components in the system
Perform initial troubleshooting and data gathering to identify and resolve issues in an efficient manner
Ensure proper escalation to technology operations teams and local system technicians
Coordinate communications status updates to all stakeholders
Maintain detailed logs and updated operational procedure documents
Open and track support tickets with external vendors including telco and network carriers
Monitor network security and report and document any potential breaches
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .
Skills and Requirements
5+ years of hands-on technical security experience
Ability to investigate and evaluate network traffic, read and interpret logs and packet captures
Scripting skills including PowerShell and Python
knowledge of current threats, vulnerabilities, and recent cyber attacks
Hands-on experience with TCP/IP Protocols and network/security application
Expert level experience with SIEM & EDR tools
Bachelor's Degree in Computer Science/Information Technology/Cyber Security or related experience - Previous network operations center or network administration experience a plus null
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.
Expert-level incident analysis responsible for providing guidance to the other SOC analysts
Perform threat hunting and investigations into potential threats based on log data and provide the results of the analysis to management
Provide recommendations to improve security postures across multiple environments and platforms including recommendations for design improvements and product offerings
Assist with testing and deployment of SIEM, MDR, and SOAR tools
Assist with tweaking and upkeep to ensure effective monitoring and alerting of security incidents
Write scripts to query systems for security purposes using PowerShell or Python
Monitor information on all network sites with the use of various monitoring tools
Monitor security tools for active alerts and work with the teams to resolve them
Identify and resolve or escalate any possible outages or deterioration of components in the system
Perform initial troubleshooting and data gathering to identify and resolve issues in an efficient manner
Ensure proper escalation to technology operations teams and local system technicians
Coordinate communications status updates to all stakeholders
Maintain detailed logs and updated operational procedure documents
Open and track support tickets with external vendors including telco and network carriers
Monitor network security and report and document any potential breaches
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .
To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .
Skills and Requirements
5+ years of hands-on technical security experience
Ability to investigate and evaluate network traffic, read and interpret logs and packet captures
Scripting skills including PowerShell and Python
knowledge of current threats, vulnerabilities, and recent cyber attacks
Hands-on experience with TCP/IP Protocols and network/security application
Expert level experience with SIEM & EDR tools
Bachelor's Degree in Computer Science/Information Technology/Cyber Security or related experience - Previous network operations center or network administration experience a plus null
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.