SOC Analyst

Stefanini Group•Dover, DE

1d•Hybrid

About The Position

Stefanini Group is hiring a SOC Analyst in Dover, DE. This is a hybrid role requiring up to 3 days a week on-site. The successful candidate will be responsible for monitoring and analyzing security threats in real-time, identifying vulnerabilities, and responding to security incidents. This role requires strong technical skills, excellent analytical abilities, and the capacity to work effectively in a fast-paced environment.

Requirements

Strong understanding of IT basics, including operating systems, network protocols, and security tools.
Proficiency in using SIEM systems, IDS/IPS, firewalls, antivirus, and endpoint detection tools.
Knowledge of programming languages like Python or PowerShell for automating tasks and creating scripts.
Basic understanding of computer forensics for incident investigation.
Ability to analyze logs to spot patterns and anomalies.
Experience in responding to security incidents effectively.
Understanding of attack patterns and tactics used by cyber criminals.
Excellent communication skills for reporting and collaboration.
Strong analytical and problem-solving abilities.
Ability to adapt quickly to evolving cyber threats.

Nice To Haves

Relevant certifications such as CompTIA Security+ or equivalent are beneficial.

Responsibilities

Continuously monitor network traffic, system logs, and other security tools to detect unusual or suspicious activities that could indicate an incident or vulnerability.
Identify and categorize security incidents such as malware infections, data breaches, and insider threats. Respond swiftly to contain, mitigate, and resolve incidents.
Assess alerts generated by security tools, determine their severity, and prioritize responses accordingly.
Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques to enhance monitoring and response efforts. Leverage these findings to conduct proactive threat hunting across SIEM and EDR platforms.
Examine logs from a range of sources including firewalls, intrusion detection systems, antivirus software, and system endpoints to identify irregularities that may signal a threat.
Operate and manage security technologies such as SIEM systems, IDS/IPS, firewalls, PKI management, and endpoint security solutions.
Maintain accurate records of security incidents and ensure compliance with industry standards and regulations.
Work closely with other security and IT professionals to investigate and resolve security issues.
Contribute to refining security processes and developing new detection and prevention rules.