SOC Analyst Level 1- Threat Management Response

Hybrid Pathways • Remote (San Francisco, CA, US) • 12m ago

About the Opportunity:
Hybrid Pathways, a New Era Company, is seeking a Threat Management Response Level 1 SOC Analyst to support client’s Threat Management capabilities to promptly detect and respond to threats as part of 24x7x365 monitoring and rapid incident response operation. The position requires shift work including weekends. This is a 6-month remote opportunity.

Shift -8:30 AM - 5:30 PM PST

Responsibilities:

Analysts will support the team that conducts incident response, monitoring & detection, helps develop the strategy for incident response procedures, revises playbooks and updates processes that drive incident response. Responsibilities include but are not limited to:

- Triage, intake cases, and respond to alerts during on call shift work
- Interface with security incident commanders to ensure a quick mobilization for high-severity incidents
- Ability to identify key details discussed during an incident and add to documentation
- Write, update, and maintain incident response (IR) runbooks and processes
- Work with end users to provide additional training and awareness
- Project assignments and other responsibilities as required

Required Skills:

- Experience working on incident response teams or Security Operations Centers
- Basic understanding of the Incident Lifecycle
- A calm methodical approach to investigating potential threats under pressure
- Minimum of 1-3 years in cybersecurity, focused on Incident Response or SOC
- Ability to explain and write technical details to a non-technical audience
- Ability to work independently and identify areas of need in highly ambiguous and time-sensitive situations
- Understanding of core cybersecurity concepts such as encryption, hashing, non-repudiation, vulnerability management, and least privilege
- Understanding of access control technologies such as Active Directory, Okta, Duo, and LDAP
- Excellent analytical skills
- Collaborative team worker – both in person and virtually using MS Teams or similar
- Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel, and PowerPoint
- Ability to work as liaison between business and information security / information technology
- Flexibility to accommodate working across different time zones
- Excellent interpersonal communication skills with strong spoken and written English
- Business outcomes mindset
- Solid balance of strategic thinking with detail orientation
- Self-starter, ability to take initiative
- Project management and organizational skills with attention to detail

Preferred Skills:

Experience defending large enterprise environments is a huge plus
Relevant industry security certifications such as CompTIA (Security+, Linux+, Network+), EC-Council (Certified SOC Analyst, Certified Ethnical Hacker), SANS GIAC Security Essentials Certification (GSEC)
Familiarity with other verticals such as: IT, cloud computing, or Networking
Networking experience with DNS, TCP/IP, SSH, etc. routing protocols and technologies
Experience with scripting and automation (Python, PowerShell)
Experience with cloud infrastructure environments (AWS, Azure, GCP)
Ability to write SQL to search data warehouse databases
Experience responding to high severity incidents and handling the remediation process. (e.g. Malware analysis, large scale phishing attacks, production intrusion, etc.)
Familiarity with the following tools

Security Incident and Event Monitoring (SIEM)
File Integrity Monitoring (FIM)
Vulnerability Scanners
Network and Host Intrusion Detection (IDS) such as SNORT/Sourcefire, Palo Alto, etc.
Endpoint Detection & Response (EDR)
Incident Response Case Management Tools
Malware Analysis / Reversal Tools
Security Orchestration, Automation & Response (SOAR)
Single Sign On (SSO) solutions
Network sniffers and packet tracing tools such as DSS, Ethereral, tcpdump, Wireshark, etc.

Investigate security events for the following platforms and technologies:

Cloud (AWS, Azure, GCP)
Windows/Mac/Linux OS
Cisco physical and virtual network devices and platforms

RequiredEducation:

Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience

EEOStatement:
Hybrid Pathways is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or veteran status.