What are the responsibilities and job description for the SOC Engineer position at IT Solutions LLC?

Title : SOC Engineer

Location : Alameda, CA

ESSENTIAL DUTIES AND RESPONSIBILITIES :

Oversee the end-to-end threat management process, from initial detection and analysis to containment, eradication, and recovery. Ensure that all incidents are thoroughly investigated and documented, and that lessons learned are incorporated into future threat management strategies.
Regularly assess the effectiveness of detection mechanisms and make necessary adjustments to improve accuracy and coverage. This includes conducting regular threat hunting exercises to identify gaps and areas for improvement.
Create and refine correlation rules within the XDR Platform (Cortex XDR) to identify complex attack patterns and reduce false positives. This involves analyzing security events and developing rules that accurately detect malicious activities.
Incorporating threat intelligence feeds into the team's detection capabilities to stay updated on the latest threats and attack techniques. Use this intelligence to enhance detection rules and response strategies.
Utilize machine learning and behavioral analytics to identify anomalies and potential threats that traditional signature-based tools might miss. This includes analyzing user behaviors and network traffic to detect suspicious activities.
Regularly review and fine-tune the configurations of current security tools such as SIEM, EDR, and IDS / IPS to ensure they are effectively detecting and alerting on potential threats.
Work with various log sources and data feeds to enhance the visibility and detection capabilities of the team. This includes integrating logs from network devices, servers, applications, and cloud environments.
Co-create and maintain playbooks to standardize and automate threat response procedures. This includes developing automated workflows to streamline incident response, reduce response times, and improve the overall efficiency and effectiveness of the cybersecurity operations team.
Stay current with the latest threat landscape and emerging trends in cybersecurity to proactively identify and mitigate potential security risks.
Contribute to the overall information security strategy.

EDUCATION / EXPERIENCE / KNOWLEDGE & SKILLS :

Education :

Bachelor's degree in related discipline and 10 years of related experience; or

Equivalent combination of education and experience

CISSP, CISM, CEH, OSCP, GIAC or similar cybersecurity certification required.

Experience :

Experiece with Palo Alto Cortex XDR is a MUST. Extensive experience in Palo Alto Cortex XDR and a deep understanding and practical application of XQL queries is required.

Extensive experience in a SOC environment, with a strong background in threat detection, incident response, and threat hunting.

Experience with threat intelligence platforms and integrating threat intelligence feeds to security tools to enrich threat detection.

Experience in proactive threat hunting to identify and neutralize emerging threats.

Experience or working knowledge of cloud, network, and application security.

Experience in Biotech / Pharma is a plus.

Knowledge / Skills / Abilities :

Proficiency with SOC tools and technologies such as SIEM (Splunk), EDR (Cortex), and IDS / IPS (e.g., Snort, Suricata).

Strong scripting skills (e.g., Python, PowerShell) to automate tasks, enhance detection capabilities, and develop automation through a SOAR platform.

Ability to configure and fine-tune security tools to maximize their effectiveness by integrating various log sources and data feeds to enhance visibility and detection.

Ability to work with various data sources to create high-fidelity alerting.

Knowledge of machine learning and behavioral analytics to identify anomalies and potential threats.

Ability to develop and refine correlation rules within SIEM to detect complex attack patterns, leveraging the MITRE Telecommunication&CK framework.

Strong analytical skills to correlate events and make informed decisions based on data.

Ability to analyze user behaviors and network traffic to detect suspicious activities.

Ability to establish and maintain strong relationships with security vendors.

Extensive knowledge of DNS, network protocols, firewalls, VPNs, web application firewalls, email security, IPS / IDS, SIEM, DLP, cryptography, application whitelisting, and endpoint protection

Excellent communication skills.

Resourceful and proactive to find innovative solutions to challenges.

A mindset focused on continuous learning and improvement.

Outstanding judgment and problem-solving skills, including negotiation and conflict resolution.

Ability to work in a team environment, create timelines, and continually make necessary adjustments.

The salary range provided for this contract role represents our good faith estimate for this position. Within the range, individual offers will vary based on the selected candidate's experience, industry knowledge, technical and communication skills, location and other factors that may prove relevant during the interview process (W2 or C2C). In addition to compensation, the company provides eligible W2 employees with a comprehensive and highly competitive benefits package.

I.T. Solutions, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Apply for this job

Receive alerts for other SOC Engineer job openings

SOC Engineer

What are the responsibilities and job description for the SOC Engineer position at IT Solutions LLC?

What is the career path for a SOC Engineer?

Job openings at IT Solutions LLC

Not the job you're looking for? Here are some other SOC Engineer jobs in the Alameda, CA area that may be a better fit.

We don't have any other SOC Engineer jobs in the Alameda, CA area right now.

AI Assistant is available now!