SOC Tier 3 Analyst

Provides advanced technical investigation and forensics capabilities across malware, phishing, cloud access security brokers (CASB), network, and configuration compliance domains

Performs sampled reviews of investigated incidents by Tier 1/Tier 2 Analysts to improve ticket quality and provides feedback to coach junior Analysts

Collaborates closely with the SOC Manager to develop recommendations and/or technical implementations to improve workflows within the SOC, including the use of automation and optimization of processes

Education: Degree in Computer Science, Engineering, Information Systems, or Cyber Security or equivalent degree or 10 years experience

Tools - Crowdstrike, Tanium Sumo, O365

Specific Experience:

5 years - Information security / technology experience, preferably in a SOC / NOC

4 years - Experience using various operating systems and industry standard monitoring, logging, alerting and investigation processes.

2 years - Incident response experience.

2 years - Experience with scripting skills in common languages (e.g. PowerShell, Python, Java, Bash).

Certs:

CompTIA Network+, CompTIA Security+, GCIA, GCIH, GREM, or GPEN