Security Operations Center Tier II Analyst
Core
Investigate, resolve, and report on escalated security events to protect the organization from potential threats.
Role type
Tier II Security Operations Center Analyst
Builds
Security tools and platforms utilized by the Security Operations Center
Domain
Cybersecurity / Information Security
Required skills
Security alert investigation, Incident response, Security playbook maintenance, Threat hunting, Security tool implementation, Metric reporting, SIEM analysis, IDS/IPS management, Network Access Control (NAC), Root cause analysis
Preferred skills
None stated
Technologies
SIEM, Firewall, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Network Access Control (NAC)
Responsibilities
Conduct thorough investigations on security alerts to identify root causes and impacts; Escalate security alerts to senior team members; Create and maintain security playbooks and incident resolution procedures; Tune security platform alerting parameters; Create and maintain metric reports for management; Manage moderately complex security-oriented projects; Participate in on-call rotation including nights and weekends; Conduct threat hunts and create comprehensive reports; Operationalize current threat intelligence; Conduct interviews of associates regarding security incidents
Seniority
Mid-level, hands-on IC
