Tier 2 SOC Analyst, AI Tools Experience

Job Description:

• Transform the client’s detection strategy
• Organize detections, tune rules, and create and maintain cross-functional feedback loops
• Lead analysis, design, and hands-on analysis and remediation for attack surface reduction functions such as vulnerability management and penetration test remediation
• Create internal alert strategy and process documentation for how clients identify alerting opportunities and prioritize based on threat level, with a focus on gaps
• Review noisy alerts and tune them to reduce alert fatigue
• Assess alerts that have not triggered to determine whether logic needs adjustment
• Serve as the main point of contact to the MDR provider’s Detection team
• Work with client Incident Responders on alert feedback loops and analyze true and false positive alerts
• Create regular reporting on detections created and rules tuned
• Contribute to the client’s “Signal to Noise ratio” detection metric
• Coordinate with the MDR Threat Hunting team to request and implement SentinelOne STAR rules
• Map detections to standard frameworks such as the Cyber Kill Chain
• Work with the MDR provider on ongoing tuning of on-call criteria
• Perform attack surface reduction, including change management, cross-functional coordination, enterprise communication planning and execution, and security remediation changes
• Provide vulnerability prioritization and analysis, ticketing, reporting, trending, metrics, and assistance to patch teams troubleshooting root causes of patching challenges
• Analyze stale identities and accounts and admin privileges, and recommend and implement improvements

Requirements:

• 3+ years Security Operations or Equivalent Experience
• Artificial Intelligence (AI) tools experience
• Experience with Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) tools
• Experience mapping detections to common frameworks and risk reduction models
• Familiarity with the latest trends in attacker TTPs

Benefits:

• Competitive medical coverage for employees and dependents
• Dental coverage for employees and dependents
• Vision coverage for employees and dependents
• 401k match which vests every payroll
• Flexible and remote friendly work environment
• Training opportunities to expand your skill set