SOC Analyst Tier 3

Summit 7 Systems

17d•$75,000 - $90,000•Remote

About The Position

Summit 7 is here to rise above the ordinary. The work we do here goes far beyond day-to-day projects - it further protects the US defense industrial base from cyber threats, fosters thought leadership, and creates growth opportunities. Our support staff, sales team and technicians are all coming together to make a difference. We also recognize that you're a person with life beyond work, that's why we invest in these meaningful health and welfare benefits: Excellent health/dental benefits from BCBS See into the future with our luxurious VSP vision benefits Prepare for the long-haul courtesy of our 401k with company matching Unlimited mobile phone plan 10 days' vacation, 7 days sick time Bonuses and salary increase potential via our certifications plan We do cool work here, defying expectations by simply being who we are - each of us makes an impact.

Requirements

Administrative skills in several operating systems, such as Windows, OS X, and Linux
Experience with the Microsoft Security Stack.
Experience with KQL for security analysis.
Base level of knowledge of SIEM architecture and custom integration.
Understand basic principles of Information Security
Clear Communication and presentation skills pertaining to security services
Writing proficiency requirements with the ability to draft clear and professional internal and external correspondence.
Familiar with the concept/purpose of a SIEM
Security + certification or SANS SEC401

Nice To Haves

Additional Scripting languages
Certified Ethical Hacker or better
Blue Team Security Level 1 Certification
Proficient in a python or PowerShell
EC-Council Certified SOC Analyst (CSA)
Microsoft SC 200
MS or AZ 500
Experience with Microsoft Sentinel preferred

Responsibilities

Senior level staff within the Security Operations Team are responsible for handling higher level cybersecurity incidents in accordance with the full IR Lifecycle.
Liaison between Summit 7 and clients for the MSSP agreement.
Responsible for triage, detection, and investigating potential security threats and handling them according to processes and procedures.
Deployment, tuning and maintenance of SIEM and Detection Engineering Platforms.
Assistance with compliance mandates related to CMMC L2 and L3 implementation
Track and understand emerging security practices and threats, leveraging this knowledge to improve security configurations.
Escalation points for SOC Tier 2 in relation to triage, analysis and incident response.
Escalation points for SOC Tier 2 in SIEM and Detection Engineering.
Responsible for projects dedicated to Service improvement and optimization.
Implement security measures to assist in disaster recovery and planning
Review of the most recent SIEM alerts to determine relevance and urgency
Triage according to organizational procedures to ensure that a genuine security incident is occurring
Assist with the configuration of security monitoring tools
Other duties as assigned