Security Operations Center SOC Analyst

Job description

Job Description

Intel Security has amazing opportunities ahead! In the next several months, we anticipate transitioning to a stand-alone company. This will help to position us as one of the largest pure-play cybersecurity companies in the world. During this transition, we will continue to have a bold vision to achieve, which we can't achieve without talented people.

McAfee is currently seeking an Information Security Operations Center Analyst to join its growing Information Security team. This is a full-time opportunity in the Plano, TX office. On a daily basis, the Information Security Operations Analyst works within the Security Operation Center to monitor security alerts, respond and remediate detected issues, and work with the Incident Management process to remove threats and vulnerabilities within the organization. This role collaborates with other Information Security and IT Operational teams to maintain a secure environment and for incident response capabilities.

Responsibilities:

·  Daily review of security alerts/logs with follow-up on any suspicious activity
·  Perform investigation of network and hosts/endpoints for malicious activity, to include analysis of packet captures, and assist in efforts to detect, confirm, contain, remediate, and recover from attacks
·  Proactively monitor, identify and analyze complex internal and external threats, including viruses, targeted attacks and unauthorized access, and mitigate risk to IT systems
·  Work in concert with team members, Information Security engineering, and relevant Subject Matter Experts to process, analyze and drive the remediation of identified IT related vulnerabilities
·  Responsible to follow the IT Security Incident Response policies and tools
·  Contribute to Information Security policies, standards, and supporting documentation
·  Root cause analysis, troubleshoot complex issues with existing security and privacy protection protocols
·  Responding to inbound security monitoring alerts, emails, and inquiries from the organization.
·  Providing support for Incident Response, including evidence collection, documentation, communications, and reporting
·  Maintaining and improving standard operating procedures and processes
·  Providing documentation of work through a variety of communications such as ticketing, operational briefs, and status reportsAssist with the operation and management of vulnerability solutions across the team's portfolioIdentify security issues and risks, and assist with the development of risk mitigation plans
·  Help drive continual improvement in the vulnerability management and security posture
·  Conduct security research to maintain current knowledge of latest security trends and issues.
·  Maintaining a high level of confidentiality

Inside this Business Group

The Intel Security Group combines employees from McAfee and Intel – people with security expertise in hardware, software, and solutions into one business unit focused on building hardware, software, services and end-to-end security solutions. Intel Security Group sets the stage for new levels of collaboration and innovation and will drive leadership in the industry by providing ubiquitous security and identity protection for people and businesses worldwide.

Posting Statement. Intel prohibits discrimination based on race, color, religion, gender, national origin, age, disability, veteran status, marital status, pregnancy, gender expression or identity, sexual orientation or any other legally protected status.

Desired profile

SOC/NOC Experience - 1-3 years' experience in 24x7 shifted operations environment of a large number of critical production servers and High Availability uptime environments
Bachelor's degree in Computer Science, Information Security and Risk Management, Information Systems, Engineering, Business or related major and/or prolonged course of study in a specialized field or equivalent experienceMinimum 3 years working experience securing IT systemsCertified Information Systems Security Professional CISSP, Security Information Security Manager, Global Information Assurance Certification, or related Security Certificate required
Experience in a global IT enterprise environment
Experience with security incident management Experience with administration and management of Windows, Linux, UNIX, and mobile operating systemsExperience with: Real-time monitoring and triage Cyber intelligence Network, host, and malware analysis IPS/IDS Sensor tuning Custom IPS/IDS signature creation SIEM experience
Scripting skills such as Python and Perl.Strong analytical mindset, natural curiosity to check and double check