SOC Analyst

Role Overview

DMI is looking for a Security Operations Center (SOC) Analyst to monitor, detect, and analyze threats and cybersecurity events. The SOC Analyst will execute and help create operational processes for consistent monitoring of client environments and support the Incident Response Team.

What You Will Do

Monitor network and system security events, conduct threat hunting, develop alarms for suspicious activity, escalate alerts to clients, and prepare reports to summarize detected activities.

Why It Might Be a Fit

The SOC Analyst will work independently, establish priorities, and manage task completion within set SLAs. The ideal candidate will have hands-on experience with security tools and technologies, and be able to communicate effectively through writing, speaking, and presenting.

Requirements

• Bachelor’s degree from an accredited college or university with a major in computer science, information systems, engineering, business, or a related scientific or technical discipline
• CompTIA CySA+ certification or a CompTIA Security+ (or other relevant IAT Level II/III Certification) along with one of the following: CEH, CFR, CCNA Cyber Ops, CCNA-Security, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+
• Experience analyzing intrusion events such as phishing emails, malware, privileges misuse, traffic indicating potential malicious activities such as DoS/DDoS, brute force, data loss through exfiltration/inadvertent disclosure
• Applied experience of threat analysis model/frameworks such as Cyber Kill Chain, MITRE ATT&CK, Diamond Model, Pyramid of Pain etc.
• Working knowledge of advanced threat Tactics, Techniques and Procedures (TTPs)
• Applied experience with network traffic analysis with tools like Wireshark
• Applied experience with a variety of Opensource threat research tools/platforms such as Virus Total
• Working knowledge of network and security architecture principles such as defense-in-depth
• Experience with proprietary security protection/detections tools such as Firewall, Host and Network IDS/IPS, Anti-Virus, EDR, URL Filtering Gateways, Email Filtering Gateways, DLP tools, and SIEM tools such as Splunk etc.
• Capable of working independently, establishing priorities and managing task completion within set SLAs
• Able to communicate effectively through writing, speaking, and presenting to client technical representatives
• Team player capable of productively contributing to the client mission by supporting fellow teammates in a dynamic growing and changing environment

Benefits

• Convenience/Concierge
• Development
• Financial
• Recognition
• Wellness