What are the responsibilities and job description for the Remote Role - Rapid7 InsightIDR InsightConnect Specialist SOC SpecialistSOC Analyst position at Vinsys Information Technology Inc?
Introduction : We are looking for a skilled and experienced Rapid7 InsightIDR and InsightConnect Specialist to join our Security Operations Center (SOC) team. In this role you will lead incident response activities manage SIEM and SOAR tools and contribute to the overall security strategy by automating workflows and optimizing security operations. If you have handson experience with Rapid7 solutions automation and orchestration we want to hear from you!
Key Responsibilities :
- Incident Detection & Response : Lead incident response activities by ensuring rapid detection analysis and resolution of security incidents. Provide direct handson support to the SOC team during highpriority events.
- SIEM & SOAR Management : Configure and manage Rapid7 InsightIDR and InsightConnect including integrating log sources developing custom parsers and optimizing correlation rules and use cases for advanced threat detection.
- Threat Analysis : Conduct indepth analysis of security events to identify and differentiate between successful intrusions compromises and false positives. Provide actionable insights to reduce noise and improve threat visibility.
- Automation & Orchestration : Use Ansible Puppet Python and PowerShell to automate repetitive SOC tasks enhance incident response processes and increase operational efficiency.
- Configuration Management : Utilize Ansible and Puppet for configuration management ensuring system consistency and automation across multiple environments.
- Investigation Management : Lead investigations into incidents escalated by Level 1 analysts ensuring thorough documentation and efficient resolution of issues.
- Quick Mitigation Techniques : Implement temporary defensive measures and response actions until permanent solutions are deployed.
- Security Enhancements : Develop maintain and refine playbooks in Rapid7 InsightConnect to orchestrate and automate SOC processes improving response times and operational efficiency.
- Gap Analysis & Recommendations : Identify gaps within the security infrastructure and recommend strategies for risk mitigation continuous improvement and enhanced security posture.
- Vulnerability Awareness : Stay updated on the latest vulnerabilities threat advisories and penetration techniques actively contributing to proactive defense measures against emerging threats.
Desired Skills & Qualifications :
Preferred Qualifications :
Why Join Us :
Key Skills
Sales Experience,Crane,Customer Service,Communication skills,Heavy Equipment Operation,Microsoft Word,Case Management,OSHA,Team Management,Catheterization,Microsoft Outlook Calendar,EHS
Employment Type : Full Time
Experience : years
Vacancy : 1
