Security / Soc Analyst III

5 plus years experience in the security domain, Incident Response, threat monitoring, and handling incidents (incident triage and response)

Determine detection requirements for data sources being on-boarded to the SIEM, and assessing the value of in place SIEM detection cases, in order to determine gaps and overlap in the overall detection scheme.

Perform security monitoring and incident response of cyber security events for proper determination of being considered a cybersecurity event.

Triage offenses for false positives

Hands-on experience defining detection or protection schemes based on industry standards and frameworks.

SIEM, Endpoint Detection and Response, Firewall/IPS/IDS, Proxy, Data Loss Prevention, Authentication

Experience leveraging data from security technologies and referential data sources to define security detection requirements, including detections which correlate data across multiple data sources.

Ability to interpret code in the support of detection case development.