Senior SOC Engineer

Description

Primary functions and essential responsibilities

• Detects, identifies, and responds to cyber events, threats, security risks, and vulnerabilities in line with cyber security policies and procedures
• When necessary, leads and coordinates incident response activities, engage stakeholders and relevant security teams outside of SOC to effectively investigate and neutralize a security incident
• Plan and execute regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
• Experience working with SOAR to automate repetitive tasks and drive efficiencies allowing analysts to work on more advanced tasks.
• Communicates with stakeholders and leadership to provide timely and accurate updates on the progress of the Incident response effort
• Identifies, documents, and blocks TTPs, IOCs, and other artifacts during incident response
• Authors content using query languages and scripting for event enrichment and efficient investigation
• Develops procedures and documentation to support incident response and forensic investigation standard operating procedures
• Contributes to the maintenance and optimization of the organization's incident response plan
• Creates detailed timelines and incident post mortem documentation following investigations
• Create, vvaluate and update SOC runbooks, playbooks, and procedures as appropriate.
• Conducts threat hunting and analysis using various toolsets based on hypothesis and intelligence
• Partner with the security engineering and platform engineering teams to optimize operations
• Support a program for continuous security controls testing and validation
• Participate in Purple and Blue teaming activities
• Perform Security Incident Campaign analysis
• Mentors and leads junior team members by example and through effective communication via one on one meetings, coaching, informal instruction, or other methods as required
• Completes projects on time, according to instruction, and within requirements described by stakeholders
• Develop metrics and scorecards to measure risk to the organization, as well as effectiveness and efficiency of SOC associate.
• Perform other duties as planned and communicated by leadership

Qualifications

Education :

Skills :

Experience Required :

General Requirements :

Reporting Relationships

Vice President, Cybersecurity

There is no set deadline to apply for this job opportunity. Applications will be accepted on an ongoing basis until the search is no longer active.