SOC Analyst

Stefanini Group • Dover, DE

1d • Hybrid

About The Position

Stefanini Group is hiring! Stefanini is looking for SOC Analyst in Dover, DE (Hybrid) For quick Apply, please reach out to Utkarsh Singh - call: 2482133604 / email: [email protected] Work Hours: M-F (37.5 hours) Work Location: Dover, DE (Hybrid role up to 3 days a week on-site.) Candidate must be local. Interview : MS Teams We are seeking a highly skilled and motivated SOC Analyst to join our cybersecurity team. The successful candidate will be responsible for monitoring and analyzing security threats in real-time, identifying vulnerabilities, and responding to security incidents. This role requires strong technical skills, excellent analytical abilities, and the capacity to work effectively in a fast-paced environment.

Requirements

• Strong understanding of IT basics, including operating systems, network protocols, and security tools.
• Proficiency in using SIEM systems, IDS/IPS, firewalls, antivirus, and endpoint detection tools.
• Knowledge of programming languages like Python or PowerShell for automating tasks and creating scripts.
• Basic understanding of computer forensics for incident investigation.
• Ability to analyze logs to spot patterns and anomalies.
• Experience in responding to security incidents effectively.
• Understanding of attack patterns and tactics used by cyber criminals.
• Excellent communication skills for reporting and collaboration.
• Strong analytical and problem-solving abilities.
• Ability to adapt quickly to evolving cyber threats.

Nice To Haves

• Relevant certifications such as CompTIA Security+ or equivalent are beneficial.

Responsibilities

• Continuously monitor network traffic, system logs, and other security tools to detect unusual or suspicious activities that could indicate an incident or vulnerability.
• Identify and categorize security incidents such as malware infections, data breaches, and insider threats. Respond swiftly to contain, mitigate, and resolve incidents.
• Assess alerts generated by security tools, determine their severity, and prioritize responses accordingly.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques to enhance monitoring and response efforts. Leverage these findings to conduct proactive threat hunting across SIEM and EDR platforms.
• Examine logs from a range of sources including firewalls, intrusion detection systems, antivirus software, and system endpoints to identify irregularities that may signal a threat.
• Operate and manage security technologies such as SIEM systems, IDS/IPS, firewalls, PKI management, and endpoint security solutions.
• Maintain accurate records of security incidents and ensure compliance with industry standards and regulations.
• Work closely with other security and IT professionals to investigate and resolve security issues.
• Contribute to refining security processes and developing new detection and prevention rules.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level