Role Name: Security Operations Center Analyst II 
Location: Antioch, TN
Work Environment: Onsite
Duration: Full-time
Shift: Mon - Fri, 40hrs/week

Job Description:
The Security Operations Center Information Security Analyst II will be part of the SOC Team. This center monitors, analysis and responds to infrastructure threats and vulnerabilities on a 24x7 basis

• Lead the analysis and investigation of information security events (IDS/Proxy/SIEM/etc.) in a 24X7 SOC environment to immediately detect, verify, and respond swiftly to cyber threats, and remove false positive. Strong networking background.
• The analyst performs monitoring, research, assessment and analysis which requires demonstrable security incident response experience.
• Serve as a technical point of escalation and provide mentoring for L1 Security Operations Center (SOC) analysts.
• Handling security alerts on Splunk SIEM and Raise tickets based on the alerts. 
• Follow ups with respective team to close the alerts, tickets. 
• Analyze and assess security incidents and escalate to appropriate internal teams for additional assistance.
• Responsible for investigating incidents, analyzing attack methods, researching new defense techniques and tools, developing security policy, and documenting procedures for SOC.
• Malware analysis and other attack analysis to extract indicators of compromise. Perform data security event correlation between various systems.
• Prepare reports, summaries, and other forms of communication that may be both internal and client facing.
• Maintain familiarity with industry trends and security best practices.
• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.
• Periodic upgradation/creation of correlation rules based on emerging threats and requirement following MITRE Attack US-Cert and other TTP sources.

Basic Qualifications (Minimum Required Experience, or Education, Knowledge/Skills/Abilities, Essential Physical Demands):

EDUCATION AND/OR EXPERIENCE:  

• 5+ years working in the Security operations Centre.
• Bachelor’s degree in engineering or higher preferred
• Excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security)
• Ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc)
• Knowledge of cutting edge threats and technologies effecting Web Application vulnerabilities and recent internet threats
• Exposure on Vulnerability assessment as well as penetration testing or forensic analysis fields are an advantage

• Experience working as part of a global team, spanning multiple time zones and cultures.

Certifications/Preferred Skills Desired

• Certifications preferred: CEH

MACHINES, EQUIPMENT, AND SOFTWARE:  Required: MS Office
Strongly Preferred:  Cisco Network devices, Nexpose or Insight VM, Splunk, Crowdstrike, SCCM, Bitlocker, Zscaler, Proofpoint, Service Now, Trendmicro, Okta, Azure, O365.

PHYSICAL DEMANDS AND WORKING CONDITIONS: Office work, possible international travel up to 5%

  
 
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws.This position's pay range is $50000.00/Yearly - $60000.00/Yearly.