Participate in and lead incident response, triage, and investigations
Conduct post-incident analysis to identify root causes and recommend preventative measures
Create incident reports and documentation for stakeholders
Design, develop, and maintain high-fidelity security detections aligned to adversary behaviors
Tune and optimize security detections and alerts to improve signal quality
Document detection logic, data dependencies, assumptions, and response guidance
Provide technical guidance and mentorship to junior SOC analysts
Lead purple team efforts to test adversary techniques
Proactively conduct threat hunting to identify malicious activity
Lead SOC project efforts and coordinate with other cyber security groups
Participate in knowledge sharing and training initiatives
Able to multitask and prioritize

6+ years of IT experience
4+ years of experience in Cyber Security or related field
Bachelor’s degree in computer science, Information Technology, or a related field or an equivalent combination of education and experience
Demonstrated experience across the full incident response lifecycle
Hands-on experience with security technologies such as SIEM, EDR, email security, CNAPP, and NDR platforms
Strong experience of designing, building, and tuning security detections within SIEM solutions
Experience participating in or supporting purple team exercises or adversary simulation activities
Solid understanding of current and emerging SOC technologies, attacker tactics, and defensive techniques
Strong understanding of the information security industry and the evolving threat landscape
Experience working with cloud infrastructure and technologies, alongside traditional on-prem environments.

IT Security Analyst IV

Key skills