Oxford Solutions has an opening with our retail construction client for a Cyber Security Analyst who will function in a Security Operations Center (SOC) Analyst role.

Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

In this role you will be responsible for triaging security alerts detected by various SIEM and detection applications.

RESPONSIBILITIES

• Monitor all sources of potential security incidents 
• Perform triage of potential security incidents to validate and determine needed mitigation
• Escalate potential security incidents to personnel, implement countermeasures in response to others, and recommend operational improvements
• Keep accurate incident notes in case management system
•  Provide advanced analysis of the results of the monitoring solutions
• Provide advice and guidance on the response action plans for information risk events and incidents based on incident type and severity
• Provide malware analysis (executables, scripts, documents) to determine indicators of compromise, and create signatures for future detection of similar samples
• Continuously improve the service by identifying and correcting issues or gaps in knowledge (analysis procedures, plays, network models), false positive tuning, identifying and recommending new or updated tools, content, countermeasures, scripts, plug-ins, etc.
• Perform peer reviews and consultations with third party SOC analysts regarding potential security incidents

QUALIFICATIONS

• Bachelor’s degree in computer science, information systems, information security, related area or equivalent work experience
• 2+ years of experience working in cyber security technology operations
• CISSP, GIAC, GMON, CEH or equivalent cyber security certifications
• Understanding of firewalls, proxies, SIEM, antivirus and IDPS concepts
• Knowledge of Advanced Persistent Threats (APT) tactics, technics, and procedures
• Understanding of common network infrastructure devices such as routers and switches
• Understanding of basic networking protocols such as TCP/IP, DNS, HTTP
• Basic knowledge in system security architecture and security solutions
• Strong analytical, interpersonal, verbal/written communication and problem-solving skills
• Demonstrated collaborative skills and ability to work well within a team
• Self-motivated with critical attention to detail, deadlines and reporting