Description

Monitor and analyze security events to protect state data and systems within the Client Security Operations Center.

Responsibilities

• Monitor and analyze security events from EDR, SIEM, and cloud security controls to identify threats.
• Investigate incidents, determine impact, and execute mitigation actions following established response procedures.
• Perform cyber defense incident triage, including determining scope, urgency, and potential impact.
• Conduct real-time incident handling such as forensic collections, intrusion correlation, and direct system remediation.
• Analyze log files and network alerts to identify vulnerabilities and recommend remediation.

Required Skills

• 3+ years of experience in security operations or incident response.
• Experience with Endpoint Detection and Response (EDR) systems.
• Experience with Security Information and Event Management (SIEM) systems.
• Knowledge of cloud security controls.
• Proficiency in log file analysis from diverse sources.
• Ability to perform forensic collections and threat analysis.
• Systems Administration experience.
• Experience supporting Cybersecurity Incident Response Teams (CIRTs).

Key Skills

Education

Any Gradute