Senior Cybersecurity Analyst - SOC Engineering (Detect & Respond)

Position Overview

The SOC operations function is responsible for planning and overseeing monitoring and maintenance of security operations, providing direction and leadership to internal resources. The Operations Engineer provides expertise on security technologies and innovative security concepts and works toward enhancing the resilience of security operations. They coordinate ongoing reviews of existing security programs, protocols, and planned upgrades. They establish escalation processes for security incidents and develop contingency plans and disaster recovery procedures, focusing on policy implementation and control.

Role & Responsibilities

• Deploy, configure and maintain security tools, such as SIEM and network security monitoring for the SOC team.
• Perform tuning on the security tools, to reduce false positive, improve event correlation and enhance alert accuracy to ensure timely detection of threats
• Integrate security solutions (e.g., SIEM and with endpoint security) and data sources into the SOC infrastructure for comprehensive monitoring and detection
• Provide technical support to SOC team during incident investigation by ensuring the necessary logs and tools are available and functioning
• Monitor the performance and health of the SOC security solutions, ensuring systems are up-to-date and optimized for peak performance
• Maintain technical documentation related to the security tools and configuration
• Provide regular reports on SOC security solution performance and improvements
• Collaborate with SOC analysts to ensure that security operations are aligned with overall SOC expectation
• Support internal and external security audits and compliance checks by ensuring security tools and adhere to required standards and requirements.
• Support logs source on boarding for monitoring and ensure that that onboarding is done.
• Support SOC rules, use cases and playbook development
• Evaluate and work with other teams on improving the case management tool
• Experience with SOC rules creation 
• Experience with infra/network setup on both Windows and Linux will be + point

Requirements

• At least 2 to 8 years' of experience working in SOC Engineering 
• Strong knowledge and experience in SIEM tools, EDR, NDR
• Strong experience in SOC environment, monitoring security events and alerts on endpoint and network
• Strong Interpersonal and communication skills
   

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!

#LI-SYNX13