SOC Mid-Level Analyst at ECS Tech Inc

New York, New York, United States -

Full Time

Start Date

Immediate

Expiry Date

27 Jan, 26

Salary

145000.0

Posted On

29 Oct, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

SIEM, Incident Response, Threat Hunting, Cybersecurity, Automation, Log Analysis, Critical Thinking, Process Development, Security Operations, Post-Incident Review, Threat Intelligence, Vulnerability Assessment, Remediation, Security Orchestration, Cloud Security, Phishing Analysis

Industry

IT Services and IT Consulting

Description

ECS is seeking a SOC Mid-Level Analyst to work remotely. Candidate must reside in the tri-state area (NY/NJ/CT) and be able to work onsite at the client location, as needed. ECS is seeking a Mid-Level SOC Analyst with demonstrated experience supporting the development of processes, procedures, and automations to rapidly ingest, aggregate, correlate, normalize, and analyze event messages to rapidly and assuredly identify and respond to Indicators of Compromise (IoC). The ideal candidate is a critical thinker and perpetual learner who is excited to solve some of our clients’ toughest challenges. To be successful the candidate must have experience working in a mature 24x7x365 Security Operation Center. Shift schedule: Fri-Mon, 3:00PM - 1:00AM ET (subject to change) Responsibilities include: * Continuously monitors SIEM and on-premises infrastructure/cloud applications for security events to threats & intrusions, including: * SIEM alert queue * Phishing email inbox * Intel feeds via email and other sources (i.e., US-CERT, MS-ISAC) * Incident ticketing queue * Participates with responding to and handling all critical incident activity. Ensure the execution of proper containment, remediation, and recovery activities. * Assesses and documents lessons learned as part of post-incident review, such as unsuccessful controls, outdated procedures, or incomplete remediation actions. * Coordinates with SIEM engineering to tune security events and alerts for improving alert fidelity. * Assists with creating and tuning Security Orchestration and Automation (SOAR) playbooks and automated workflows. * Performs proactive threat hunting to identify and characterize new emerging threats, vulnerabilities, and risks. * Works closely with Cyber Threat Intel to provide information on detection patterns for new upcoming threats * Compiles threat hunt reports as requested on any specific hunt/threat inquiry and disseminate to SOC leadership. Conducts research and document events of interest within the scope of Cybersecurity. Salary Range: $120,000 - $145,000 General Description of Benefits [https://ecstech.com/careers/benefits] Qualifications * Minimum of 3 years experience conducting analysis of log data in support of intrusion analysis or information security operations. * Bachelors degree or equivalent with relevant certifications. * Experience with two or more analysis tools used in a CIRT or similar investigative environment. * Ability to build content in SIEM system. * Ability to analyze and triage IoCs.

Responsibilities

The SOC Mid-Level Analyst will continuously monitor security events and respond to critical incidents, ensuring proper containment and recovery activities. They will also conduct proactive threat hunting and coordinate with SIEM engineering to improve alert fidelity.