Our client is seeking a Security Operations Center (SOC) Analyst who is critical in safeguarding the State of Nebraska's digital assets by actively monitoring, analyzing, and responding to security incidents. This position requires a keen understanding of cybersecurity principles, threat detection, incident response, and strong analytical skills to identify and mitigate security threats in real time. As a member of the Information Security Team, this in-person position requires the person to be on call.
Responsibilities:
- · Monitor and triage security alerts and events from various sources, including SIEM, IDS/IPS, firewalls, and endpoint protection systems.
- · Conduct in-depth analysis of security events to identify potential security incidents or breaches.
- · Investigate and triage security alerts, determining the threat's scope, impact, and severity.
Aid in developing and maintaining standard operating procedures (SOPs) for incident detection, response, and escalation.
- · Collaborate with cross-functional teams to resolve security incidents and implement appropriate countermeasures.
- · Perform threat-hunting activities to proactively identify and mitigate emerging threats.
- · Maintain and update security tools and technologies to ensure optimal performance and effectiveness.
- · Provide timely and accurate reports on security activities, trends, and metrics to leadership and stakeholders.
- · Participate in security awareness training and education programs for staff members to enhance cybersecurity awareness and best practices.
- · Stay current with industry trends, emerging threats, and security technologies to continuously improve SOC capabilities.
Requirements:
- · Associate degree in Computer Science, Information Technology, Cybersecurity, or related field.
- · Minimum of 2 years of experience working in a security operations center or similar role.
- · An associate's degree with a minimum of 4 years of experience is also accepted.
- · Strong understanding of cybersecurity principles, threat landscape, and attack vectors.
- · Proficiency in using security tools such as SIEM, IDS/IPS, endpoint detection and response (EDR), and threat intelligence platforms.
- · Experience with incident response procedures, including incident triage, containment, eradication, and recovery.
- · Familiarity with common security frameworks and standards (e.g., NIST, ISO 27001, CIS Controls).
- · Excellent analytical and problem-solving skills, with the ability to analyze large datasets and identify anomalies.
- · Effective communication skills, with the ability to convey technical information to non-technical stakeholders.
- · Relevant certifications such as CompTIA Security+ and Certified Information Systems Security Professional (CISSP) are helpful.
- · Ability to work effectively in a fast-paced environment and prioritize tasks based on the severity and impact of security incidents.
Must be able to pass background checks and employment screenings.
