Senior SOC Analyst-2ND/3RD SHIFT

Health Care Service Corporation•Chicago, IL

3d•$61,500 - $136,100•Hybrid

About The Position

This position plays a critical role in shaping the organization's overall security and strategy and ensuring its implementation across all levels. In this role, you will be overseeing and monitoring multiple feeds in a 24/7 environment to immediately detect, verify, and respond swiftly to cyber threats, e.g. vulnerability exploitation, malware, cyber-attacks, etc.; serving as a vital role in driving operational efficiency in the organization. As a Senior Security Operations Center (SOC) analyst, you will be working collaboratively with multiple teams and personnel; working with other SOC analysts as well as subject matter experts within the larger distributed Cyber defense team including; cyber threat hunters, threat intelligence analysts and forensic investigators; participating and take active role in red-team/blue-team simulated attacks and table top exercises; partnering with Security Design and Architecture Engineers to implement and improve technology and process to enhance SOC monitoring, investigation, and response capabilities.

Requirements

Bachelor’s degree and 2 years’ work experience in a relevant role, i.e. SOC Analyst, Incident Response, Cybersecurity Threat Analyst OR 6 years related work experience OR 6 years related military experience
Experience managing SOC (Security Operation Center) activities: SIEM (Security Information and Event Management) systems, IDS (Intrusion Detection systems)
Strong understanding of cyber security principles, threat landscape, new threats, vulnerabilities, attack methods and incident response methodologies.
Excellent verbal and written communication skills, with the ability to effectively convey complex technical information to both technical and non-technical stakeholders.
Skills to test automation tools and implement new automation techniques.
Ability to handle high pressure situations: Stay calm under pressure, make quick decisions and maintain a relaxed environment for the team too.
Analytical and problem-solving skills: Analyze complex data and information to identify potential threats and vulnerabilities.
Strong analytical and problem solving skills.
Hands on experience in security operations management: Know how to handle hacking attempts and minimize damage.
Must be able to identify potential risks for the organization’s information security and find ways to minimize them.
Proficient in using SIEM tools, especially Microsoft Sentinel, and familiar with the entire Microsoft XDR Suite.
Strong analytical and problem-solving skills.

Nice To Haves

Can-do mindset and attitude
Attention to details
High EQ (emotional quotient)
Embrace and love your inner techie
Willingness to learn
Security Certifications Preferred (Including but not limited to the following certifications): Certified Incident Handler (GCIH), Certified Intrusion Analyst (GIAC), Offensive Security Certified Professional (OSCP), Networking Certifications (CCNA, etc), Platform Certifications (Microsoft, Linux, Solaris, etc). CompTIA Security+, CompTIA Cybersecurity Analyst+ (CySA+)
Familiar with hacking techniques and reduce the risk of breaches from these new techniques.
Must know forensic techniques to investigate a security incident and prevent similar risks in the future.

Responsibilities

Overseeing and monitoring multiple feeds in a 24/7 environment to immediately detect, verify, and respond swiftly to cyber threats.
Serving as a vital role in driving operational efficiency in the organization.
Working collaboratively with multiple teams and personnel, including other SOC analysts, cyber threat hunters, threat intelligence analysts, and forensic investigators.
Participating and taking an active role in red-team/blue-team simulated attacks and table top exercises.
Partnering with Security Design and Architecture Engineers to implement and improve technology and process to enhance SOC monitoring, investigation, and response capabilities.
Testing automation tools and implementing new automation techniques to improve efficiency, reduce response times, and increase accuracy.
Handling hacking attempts and minimizing damage.
Identifying potential risks to the organization’s information security and finding ways to minimize them.
Investigating security incidents using forensic techniques to prevent similar risks in the future.