Senior SOC Analyst - Pittsburg, KS

Watco Companies has an opening for a Senior Security Operations Center (SOC) Analyst to work in our Network Operations and Security Operations Center team. Watco Companies is a multinational organization that operates multiple on-premise data centers as well cloud hosting solutions. The NOC/SOC team is responsible for rolling out new technologies, tools, and procedures to enhance our defensive, detection, and recovery posture to meet the ever-changing threat landscape.

 

The Senior SOC Analyst will work collaboratively with other SOC team members to detect and respond to information security incidents, maintain and follow procedures for security event alerting, and perform security investigations. Additionally, the Senior SOC Analyst will work to improve the SOC processes, and take a lead role in project work and project management. This role is equal parts operationally focused and project/engineering work to advance the security of the organization. The Senior SOC Analyst will perform tasks including monitoring, research, classification and analysis of security events that occur on the network or endpoint, development or refinement of standard operating procedures, and regulatory compliance and audit work. The Senior SOC Analyst should have familiarity with the principals of network and endpoint security, current threat and attack trends, and have a working knowledge of security principals such as defense in depth.

 

This position is on the management track for our SOC and a successful candidate should be considering a role in security management as part of their career path, though effective understanding of information security is more important than team management. We are looking for a new team member that performs well in an open and collaborative management environment of our team.

 

Responsibilities

 

• You are responsible for reviewing alerts, the evaluation of its urgency and relevancy
• You are responsible to perform vulnerability scans
• You are responsible for reviewing the vulnerability scan results and support creating remediation actions
• You help to handle incidents and increasing the capabilities of the current defensive security tools
• You help to deploy new products and tools to advance the capabilities of the team
• You help to maintain the current security-related infrastructure (e.g. SIEM, Vulnerability Scanner, IDS, EDR tools)
• You review, update, or create new standard operating procedures for effective SOC operation
• You will evaluate products and work with vendors to implement new products in our SOC
• You work with end users on detecting and remediating end point alerts and issues
• You perform threat hunting, event remediation, and deployment and tuning of security systems.
• You work on enhancing policies and procedures for standardized secure operations
• You provide initial incident response and triage of new NOC and SOC events
• You primarily work a day shift window, however there will be an afterhours and weekend incident management rotation with this position

Required Qualifications

 

• You have 3-5 years experience in SOC operations or a security related technical IT operations field
• You have basic experience in security assessment and incident management
• Technical education, preferably in computational sciences or business information technology
• You have basic experience in IT risk management, Information Security and IT processes
• Excellent communication skills in English
• You have excellent Windows operating system skills
• You have key understanding of IP networking
• You will have limited travel requirements with this role

Desired Qualifications

 

• Skills/Experience in Incident Response
• Skills in performing vulnerability scans and assessments
• Skills in setting up and maintaining firewalls
• Skills in MacOS and Linux
• Skills in scripting languages
• Spanish language skills