Security Operations Center (SOC) Analyst

We are looking for Security Operations Center (SOC) Analysts to join our Managed Security Ops (MSOC) team. Our MSOC team provides 24x7x365 monitoring and analysis of network and system behavior, events, and incidents. The SOC Analyst responsibilities include:

• Monitor and analyze security events and alerts reported by the SIEM on a 24x7 basis to identify and investigate suspicious or malicious activity, or other events which violate customer policy.
• Analyze security logs and events from the following types of devices: Firewalls, NIDS, HIDS, Proxy/web filter, vulnerability scans, routers, router IP accounting systems (i.e., Cisco NetFlow), Virtual Private Network (VPN) gateways/ concentrators, server event logs, e-mail and host anti-virus, desktop security monitoring agents, Anti-Virus servers, Internet Protocol services (i.e. DNS, DHCP).
• Open cases in the MSOC ticket management system for all security investigations performed, and security incidents handled.
• Collect and maintain information pertinent to security investigations and incidents in a form which can support current and/or future analysis, situational awareness, and law enforcement investigation efforts.
• Provide Identity and Access Management (IDAM) services in Identity Provider solutions (e.g. Microsoft Entra).
• Engage customer IT infrastructure operations and management teams to request additional information during the course of determining, confirming, and validating the veracity of a security event, as required.
• Ensure MSOC Service Level Agreements (SLAs) are maintained for notification, response, and escalation procedures.
• Providing input to appropriate IT security personnel for preparation of reports to the MSOC Lead concerning sensitive and/or national security information systems.
• U.S. Citizenship is required.

• Bachelor’s Degree in related IT field
• At least one security certification (preferred)
• Shift work required

Minimum Years of Relevant Experience

• 1 or more years of experience working in a network security operations center environment performing security event monitoring and analysis

Second Renaissance is a cybersecurity consulting and IT Management company looking for high performing professionals interested in creating and sustaining long-term impact for our customers. We need creative, analytical minds to solve our customers’ most critical business needs with savvy technical solutions. At Second Renaissance, you will build something different, experience something new, have the opportunity to blend expertise with creativity, and enjoy the pursuit along the way.