Security Operations Center Analyst

Description

Knoxville, Tennessee

Full Time Hybrid

General Purpose of Job

The SOC Analyst will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity

incidents within our organization. The ideal candidate will possess strong analytical skills, a deep

understanding of cybersecurity principles, and the ability to work collaboratively in a fast-paced environment.

Duties and Responsibilities (Daily and Monthly)

• Monitor security events and alerts from various sources including SIEM (Security Information and

Event Management) tools, intrusion detection/prevention systems, antivirus systems, and other

security tools.

• Analyze security alerts to identify potential cybersecurity incidents and assess their severity.
• Conduct in-depth investigations into security incidents, including determining the root cause, impact,

and extent of the compromise.

• Utilize threat intelligence sources to enhance the detection and analysis of security threats.
• Respond promptly to security incidents, following established procedures and protocols.
• Coordinate with internal teams and external stakeholders to contain and mitigate security incidents.
• Document all incident response activities, including actions taken, findings, and remediation steps.
• Assist in identifying and assessing vulnerabilities within the organization's systems and networks.
• Coordinate with system administrators and other stakeholders to prioritize and remediate

vulnerabilities in a timely manner.

• Track and report on the status of vulnerability remediation efforts.
• Proactively search for signs of malicious activity within the organization's environment.
• Develop and execute threat hunting methodologies and techniques to identify advanced threats that

may evade traditional security measures.

• Manage and maintain security tools and technologies, ensuring they are properly configured and

updated.

• Collaborate with the IT team to deploy, configure, and tune security solutions for maximum

effectiveness.

• Generate regular reports on security incidents, trends, and metrics for management review.
• Maintain detailed documentation of security incidents, investigations, and remediation efforts.
• Provide guidance and training to other members of the IT team on security best practices, incident

response procedures, and emerging threats

• Participate in security awareness programs to educate employees about cybersecurity risks and

mitigation strategies.

• Stay current with the latest cybersecurity trends, threats, and technologies.
• Recommend and implement enhancements to security monitoring and detection capabilities.

Requirements

Educational Requirements

• Bachelor's Degree Preferred

Computer Skills

• Data Entry
• Microsoft Word
• Power Point
• Excel

Additional Requirements: Excellent oral, grammatical, written, and multi-tasking skills.

• • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• • 2+ years of experience in a security operations role, preferably in a SOC environment.
• • Strong understanding of cybersecurity principles, protocols, and best practices.
• • Experience with SIEM tools, intrusion detection/prevention systems, and other security

technologies.

• • Proficiency in incident response methodologies and tools.
• • Knowledge of networking concepts and protocols.
• • Relevant certifications such as Security+, GIAC, CISSP, or equivalent are a plus.
• • Excellent analytical and problem-solving skills.
• • Strong communication and interpersonal skills.
• • Ability to work effectively both independently and as part of a team.