SOC Analyst 1 (Deer Park, TX, US, 77536)

Lubrizol Corp•Deer Park, TX

34d•Hybrid

About The Position

The SOC Operations Analyst role is accountable to deliver prompt and reliable security monitoring and response services to enable business productivity. This role will be part of a larger team of global security operations center (SOC) analysts with primary responsibility for an operational technology (OT) security tool, Dragos, monitoring activities with Lubrizol's manufacturing facilities. This position will work to operationalize OT monitoring processes within the SOC. As time permits, this position will support SOC processes extending beyond OT. This position is a member of the Information Technology (IT) division and reports to the Security Operations Center Manage.

Requirements

Bachelor's degree in cybersecurity, or computer science or a related field with an equivalent combination of education and experience in cybersecurity
Minimum 3 years' experience in cybersecurity roles
3+ years working in a hands-on technical IT support role with strong understanding of networking, operating systems, and Microsoft Active Directory
Strong written and verbal skills
Ability to build relationships and work in a collaborative, matrix-driven, global environment.
Strong IT process discipline
Sound decision making, proactive/creative problem solving and strategic thinking skills.
Must be a self-starter, able to manage multiple priorities and meet deadlines while providing quality customer service to internal and external stakeholders.
Must be able to drive clear accountability and expectations.
Knowledge and experience with security access administration systems and processes
Skills necessary to establish and maintain interfaces between security tools or automate security tasks.

Nice To Haves

Experience with OT security tools (Dragos), SIEM platforms (Cortex XSIAM), SOAR platforms (Cortex XSOAR)
Technical certifications such as CISSP or SANs in relevant technical domains.
Experience with DCS and PLC platforms such as Emerson DeltaV, ABB, Rockwell, Siemens, other, etc. is preferred but not required.
Understanding of distributed control systems (DCS), programmable logic controllers (PLC), safety instrumented systems (SIS) and other technologies manufacturing process control.
Understanding of network and communication protocols common in ICS environments.
Understanding of ICS design considerations with emphasis on human safety, equipment safety and the availability/security of operating environment.

Responsibilities

Conduct thorough security investigations as alerted by security tools.
Develop and execute defined incident response playbooks to investigate security incidents. This includes clear documentation of incident artifacts and business impacts/concerns.
Provide operational and administrative support, and full product lifecycle management of certain security tools (e.g., Dragos (OT), DLP, CASB, antivirus, web filtering, SIEM, etc.).
Participate in the selection and implementation of security tools.
Work with larger IT department to perform tests, uncover, and remediate security vulnerabilities to maintain a high security standard.
Understand and evaluate cybersecurity trends and risks and provide recommendations to leadership.
Function as an information security advocate to the business.
Other information security activities as needed.