Description

Perform daily operational monitoring and incident investigation within a 24x7 SOC environment.

This role is on-site.

Responsibilities

• Monitor information security events using the LogRhythm SIEM console.
• Investigate incidents using triage, event graphs, annotations, cases, dashboards, and reports.
• Analyze security events for context, appropriateness, and criticality to assist in remediation.
• Follow operational procedures to escalate and recommend responses to critical security incidents.
• Research emerging information security threats to provide insight to SOC and shared service entities.

Required Skills

• 4+ years of professional experience in network operations, network engineering, or system administration.
• Proficiency with UNIX, Linux, or Windows operating systems.
• Hands-on experience with monitoring and analyzing event traffic patterns and device log output.
• Solid understanding of TCP/IP, networking, and security product functionality.
• Knowledge of security policies, goals, and industry best practices.
• Strong investigation, remediation, and reporting skills.
• Effective written and verbal communication skills for technical reporting.

Preferred Skills

• Knowledge of network and host security technologies including firewalls, Network IDS/IPS, and AV.

Key Skills

Education

Any Graduate