Security Operations Center (Soc) Analyst

Role: Security Operations Center (SOC) Analyst

Location: REMOTE IN USA

Job Type: Contract

:

Security Analyst (SOC) Security Automation for a Publishing Company

Good Understanding of code Security and web application security or systems like infra security

Windows and Linux.

Proven and Demonstrated passion for cyber security with at least 5+ Years of relevant experience.

Good understanding of security operations, network security, threat intelligence, and incident response.

SIEM configuration (particularly Qradar). Incident and alarm response procedures, engagement with operations teams to manage incidents.

Experience/ Understanding of Cloud-based services (AWS), technologies, and providers (eg SaaS, IaaS, PaaS, etc.)

Experience with writing queries, parsing, and correlating data.

Technical understanding of PaloAlto, firewall, IDS/IPS, and Wildfire features

The ability to perform analysis of log files from multiple devices and environments, and identify indicators of security threats. Strong understanding of parsing and analyzing web, system, and security logs

Strong technical knowledge across a range of server and gateway platforms, including Linux/ Unix/ Windows/ Mac

Demonstrable knowledge of scripting/ programming tools such as PowerShell, Python

Understanding of VPN infrastructure, 2FA like Okta.

Deep understanding of network protocols and security TCP/ IP, UDP, DHCP, FTP, SFTP, SNMP, SMTP, SSH, SSL, VPN, RDP, HTTP, and HTTPS.

Familiar with YARA, STIX, TAXII, and OpenIOC for any threat intelligence.

Excellent verbal and written communication skills; ability to articulate technical knowledge to

non-technical audiences; production of policy/ standards/ project documentation

Knowledge of data leakage prevention tools DLP/CASB/Web security is an add on

Having a certification background in any one of GCIH, GCIA, GPEN, OSCP or other relevant certifications within Cyber Security is highly advantageous.

VM scanning Qualys is good to have.

Experience in handling phishing attacks using Proofpoint, CLEAR, TRAP, and TAP.

Experience in EDR solutions, simulating setups like kali-Linux.

Experience in Web security CDN Cloudflare/Akamai/Cloudfront or any WAF.