Position: Security Operations
Company: Tensill
Category: Security
Experience required: 3y
English level: upper

**Role:**
● The Security Operations Center (SOC) Security Analyst serves in a SOC team, is responsible for conducting information security investigations as a result of security incidents identified by the Level-1 security analysts who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone). You will provide analysis of Information Security Events received from Managed Security Service (MSS) Partners, Internal Tools, and Stakeholders; determine true or false positive; and execute appropriate response procedures.
● Utilize intelligence to identify risk as well as execute best practices to mitigate or remediate those risks.
● The SOC Security Analyst is expected to have a solid understanding of information security and computer systems concepts, encryption protocols, and networking protocols.
● Develop tools and techniques to act as a red team member within our organization.
● Provide guidance and oversight on incident resolution and containment techniques.

**Job Description:**
● Responsible for conducting information security investigations as a result of security incidents identified by the Level 1 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone), act as a point of escalation for Level-1 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques.
● Coordinator individual security incidents from inception to completion.
● Execute red team activities to identify risks not found by existing security tools.
● Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures. Follow ITIL practices regarding incident, problem and change management.
● Assist in automating manual processes to improve efficiency and accuracy of investigations
● Staying up-to-date with emerging security threats including applicable regulatory security requirements.
● Document incidents from initial detection through final resolution.
● Participate in security incident management and vulnerability management processes.
● Assist with internal threat / unintended threat hunting/deception activities.
● Coordinate with IT teams on escalations, tracking, performance issues, and outages.
● Works as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats.
● Communicate effectively with customers, teammates, and management.
● Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.

**Requirements:**
 ● At least 2 years previous Security Operations Center Experience in conducting security investigations. 
 ● Security monitoring experience with one or more SIEM technologies: Splunk or Azure Sentinel
 ● Demonstrate skills in digital investigations including: computer forensics, network forensics, malware analysis, and memory analysis.
 ● Strong understanding of security incident management, malware management, and vulnerability management processes (Tenable IO)
 ● Knowledge of EDR ( Crowdstrike or alternatives)
 ● Desirable (Nice to have):
     ● Bachelor's Degree / Diploma or equivalent experience in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering.
     ● Excellent English written and verbal skills. Preferred Information Security professional certifications such as CISSP, CISM, CISA, GSEC, CEH
     ● Self-starter, work independently and adjust to changing priorities, critical and strategic thinker, negotiator and consensus builder.
     ● Red Team or Blue team experience