Are you an experienced SOC Analyst looking for your next contract role? Join a leading provider of advanced cybersecurity solutions and critical services to governments and Global 2000 companies. Specializing in solving complex problems, achieving compliance, and helping organizations attain leadership in their respective industries, the company empowers businesses to drive productivity. With a global reach, the organization serves North America and beyond, with offices in Los Angeles, New Jersey, Vancouver, Ottawa, and India.
Ready to take the next step in your career? Apply today!
Responsibilities:
- Investigate escalated security incidents and determine their root causes.
- Review incidents passed on by Tier 1 analysts and assess them using a variety of data sources.
- Apply threat intelligence, including indicators of compromise (IOCs) and TTPs, to analyse alerts and incidents.
- Utilise SIEM tools (particularly Crowdstrike SIEM) to monitor and assess host, network, and identity data.
- Tune and reduce false positives, improving SIEM efficiency and alerting accuracy.
- Lead incident investigations across Windows, macOS, and Linux environments.
- Design and implement SOC runbooks, use cases, and alert rules to enhance incident response capabilities.
- Collaborate with stakeholders to conduct hunts across host data, vulnerability data, network logs, Active Directory, and other sources.
- Coordinate timely security response efforts and document incident communications for both technical and management audiences.
- Work with vendors to develop and implement new SOC use cases.
Skills/Must have:
- 5+ years’ recent experience in a Tier 2 or Tier 3 SOC analyst role, ideally within a government or critical infrastructure organisation.
- Deep experience with SIEM tools such as Crowdstrike, Splunk, and Microsoft Defender.
- Proven track record designing and implementing SOC use cases and incident response plans.
- Strong capability in data correlation across disparate sources.
- Demonstrated ability to develop effective alerting strategies and manage alert noise.
- Experience creating and using runbooks to conduct investigations with application and infrastructure teams.
- Forensic investigation expertise and a methodical, evidence-driven approach.
- Strong written skills for incident documentation and communication.
- Naturally curious, analytical and adaptive – a problem solver with both qualitative and quantitative acumen.
Benefits:
Salary:
#J-18808-Ljbffr