Cybersecurity Operations Analyst (CSOC Analyst)

Central Hudson•Poughkeepsie, AR

7d•$73,000 - $171,300

About The Position

We are seeking a diligent Cybersecurity Operations Analyst (CSOC Analyst) to join our team. In this role, you will be working within a group of highly motivated Information Technology and Cybersecurity professionals committed to keeping Central Hudson safe. The CSOC Analyst will play a key role in monitoring, detecting, and responding to security incidents to ensure the protection of our organization's critical assets. The ideal candidate will have a strong understanding of modern security principles, excellent analytical skills, and the ability to communicate effectively with internal stakeholders and vendors alike.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or related field of study. In lieu of a bachelor’s degree, an associate degree in the aforementioned fields and 3 years of cybersecurity operations or related experience or a high school diploma or equivalency degree and 5 years of cybersecurity operations or related experience will be considered
Knowledge of common and emerging attack vectors, penetration methods and countermeasures
Proficiency with SIEM and EDR tools
Understanding of a broad range of security technical concepts
Familiarity with scripting languages for automation and analysis
Effective communication skills, with the ability to collaborate with diverse teams, and communicate complex concepts clearly and concisely
Must have excellent analytical, multitasking, and organizational skills
Excellent decision-making skills
Ability to work with limited direct supervision and professionally respond to constructive feedback
Ability to work 24x7x365 rotating shifts (nights, weekends, holidays included)
Valid driver’s license

Nice To Haves

2+ years of experience performing CSOC Analyst duties
Experience in conducting risk assessments, developing risk mitigation strategies and evaluating contractual agreements
Experience in Energy & Utilities or services industry
Experience with threat hunting
Experience with data visualization tools
Relevant certifications such Systems Security Certified Practitioner (SSCP), CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+)

Responsibilities

Continuously monitors security events using various security tools and technologies, including SIEM (Security Information and Event Management) systems, intrusion detection/prevention systems, and endpoint protection solutions
Responds to and investigates security incidents, including malware infections, phishing attacks, compromised assets, and unauthorized access attempts
Conducts log analysis to identify suspicious activities and potential security incidents; correlates data from multiple sources to identify patterns and trends
Triages and prioritizes security alerts based on severity and potential impact; escalates incidents as necessary to senior SOC analysts or other relevant teams
Generates detailed reports on security incidents, including findings, actions taken, and recommendations for future prevention; provides regular status updates to management and stakeholders
Works closely with other IT and security teams to ensure comprehensive incident management and response
Monitors news, security sites, and other threat actor activity channels for new and emerging threats
Participates in continuous improvement efforts to enhance SOC processes, tools, and capabilities
Proactively hunts for threats and vulnerabilities within the corporate environment
Reviews, analyzes, and acts on threat intelligence
Stays current on emerging cybersecurity threats and technologies
Promotes cybersecurity awareness by educating others on the importance of cybersecurity
Builds relationships with government and local agencies to promote collaborative information sharing
Participates in a 24/7 shift environment, including nights, weekends, and holidays
Participates in on-call rotations as needed to respond to security incidents outside of regular working hours
Provides storm and emergency response support