Security Operations

• Monitor and investigate security alerts and perform threat hunting
• Notify managers, cyber incident responders, and cybersecurity service provider personnel of suspected incidents
• Document event history, status, and potential impact according to the cyber incident response plan
• Analyze and characterize network traffic for anomalous activity and threats
• Create advanced ad hoc SPL queries
• Coordinate threat investigations, risk assessments, and forensic analysis with internal and external teams
• Review host, network traffic, firewall, and IDS logs for potential security threats
• Use SIEM and EDR tools to monitor the operational environment
• Develop and document configuration standards, policies, and procedures for securing system infrastructure
• Advise management and team members on technology risks and mitigation strategies
• Provide technical expertise and thought leadership to multiple management levels
• Prepare investigation, incident, and security activity reports
• Identify and classify attack tactics and techniques
• Recommend and implement system performance, security, and reliability enhancements
• Build and refine SOC processes and procedures and document work in SOPs
• Train and mentor junior SOC team members
• Plan and execute SOC-related projects and initiatives

Explore SOC Analyst at Peraton. Review requirements and application details.