Senior Security Analyst - SOC Monitoring

About the role

The Security Operations Centre (SOC) team at CPX is a cross-functional Operations/Engineering team involved in all phases of the application and service release lifecycle. The Senior Security Analyst leads security monitoring efforts, analyzes log sources, responds to security incidents and strengthens the security operations program within CPX and its clients' technology.

Key responsibilities

• Validate incidents escalated by Tier 1 SOC analysts and perform a second level of threat assessment
• Analyze log files, evidence and other information to identify attackers and characterize anomalous network traffic
• Provide recommendations for incident handling, security monitoring and validation of physical security
• Identify weaknesses in software, hardware and networks, and coordinate with stakeholders to validate network alerts
• Monitor external data sources such as threat intelligence feeds and CERT teams, and contribute to SIEM content development, tuning, reports and dashboards
• Take care of configuring, implementing and maintaining DLP technologies

Required profile

• Minimum 3-5 years of experience in one or more of the listed areas
• BS or MS in Information Security, Computer Science, Electrical Engineering or a related field
• Ability to pass all security clearances
• Excellent communication, organizational and time-management skills, and strong problem-solving abilities

Required skills

• Host-based and network-based log analysis; use of tools such as Wireshark, ELK, Rekall, Ghidra and FlareVM
• Windows/Linux/Unix, NIDS/HIDS, and SIEM alert monitoring with Splunk and EDR solutions
• Related security certifications such as CCNA, Network+, Security+, CISSP, CISM, GICSP, GCIH, GCIA or GRID