SOC Analyst, US SOC

Thrive•Tampa, FL

2d•Hybrid

About The Position

Thrive is hiring a SOC Analyst 1 to join its Security Operations Center. The role helps continuously monitor and improve customers’ security posture and prevent, detect, analyze, and respond to cybersecurity incidents using technology and established processes. The ideal candidate is passionate about information security and the value of a well-managed security monitoring solution. The position performs security event monitoring and investigation across multiple data sources, proactively monitors and responds to threats, analyzes SIEM and SOC data, reviews vulnerability scans, and recommends remediation. It also supports Thrive’s information security strategy for more than 400 clients, manages client security awareness training, and contributes to security practices and enhancements. The role is based in Thrive’s Tampa, Florida office and is hybrid.

Requirements

Knowledge of SIEM (Security Information and Event Management).
Knowledge of TCP/IP, computer networking, routing, and switching.
Knowledge of IDS/IPS, penetration testing, and vulnerability testing.
Knowledge of firewall and intrusion detection/prevention protocols.
Knowledge of Windows, UNIX, and Linux operating systems.
Knowledge of network protocols and packet analysis tools.
Knowledge of EDR, antivirus, and antimalware.
Knowledge of content filtering and email and web gateways.
Understanding of cybersecurity threats and experience with incident response standards and procedures.
Comprehension of good security practices.
Professional experience in a system administration role supporting multiple platforms and applications.
Ability to communicate network security issues to peers and management.
Ability to analyze large amounts of data from various sources to solve complex problems and make sound decisions.
Ability to work effectively in a team and collaborate with teammates and other stakeholders.
Knowledge of computer networking and security, vulnerability discovery and analysis, and operating system internals.
Familiarity with TCP/IP and application-layer protocols such as HTTP, SMTP, and DNS.
Excellent written and verbal communication skills.

Nice To Haves

Knowledge of common Windows and Linux/Unix system calls and APIs.
Understanding of antivirus.
Knowledge of programming languages.
Knowledge of internal file structures for file formats commonly associated with malware, such as OLE, RTF, PDF, and EXE.

Responsibilities

Monitor security events using SIEM data from network and host-based intrusion detection/prevention systems, network infrastructure, systems, applications, and databases.
Investigate intrusion attempts, distinguish false positives from actual intrusions, and analyze exploits.
Proactively monitor for and respond to known and emerging threats.
Carry out Thrive’s information security strategy internally and for more than 400 clients in the Northeast.
Analyze SOC and SIEM data and determine whether further investigation is needed.
Follow Thrive’s security standards and best practices and recommend future enhancements.
Manage clients’ security awareness training.
Analyze vulnerability scans and determine remediation steps.
Stay informed about security events and techniques to help protect clients.
Build security awareness through training and education.