Senior SOC Analyst

The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S., supporting 15,000 healthcare professionals and team members at more than 1,200 health and wellness offices across 47 states in four distinct categories: Dental care, urgent care, veterinary care, and medical aesthetics. Working in partnership with independent practice owners and clinicians, the team is united by a single purpose: to prove that healthcare can be better and smarter for everyone. TAG provides a comprehensive suite of centralized business support services that power the impact of five consumer-facing businesses: Aspen Dental, ClearChoice Dental Implant Centers, WellNow Urgent Care, Lovet Animal Hospitals and Chapter Aesthetic Studios. Each brand has access to a deep community of experts, tools and resources to grow their practices, and an unwavering commitment to delivering high-quality consumer healthcare experiences at scale.

As a reflection of our current needs and planned growth we are very pleased to offer a new opportunity to join our dedicated team as a Senior SOC Analyst.

Job Description

The Senior SOC Analyst is responsible for managing activities relating to monitoring and responding to security events. Additionally, this position will work closely with the SOC Manager on the development and oversight of the SOC program and maintaining operational efficiencies. The Senior SOC analyst receives research, triages, and documents all security events and alerts as they are received. This individual supports multiple security-related platforms and technologies, interfacing with others within the IT organization, as well as other internal business units and external customers/partners. Events will be generated from endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third parties and other sources. The Senior SOC Analyst is an excellent communicator with others and is able to explain security concepts to both security and non-security personnel.

The Senior SOC analyst reports to the SOC manager and is an involved member of the SOC team. This role must display an in-depth understanding of new trends and technologies related to IT security and compliance and contribute to the company IT security strategy and roadmap.

Essential Job Duties

• As an active member of the team, monitor and process response for security events on a 24x7 basis.

• Plan and execute regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).

• Stay current with and remain knowledgeable about new threats. Analyze attacker tactics, techniques, and procedures (TTPs) from security events across a large heterogeneous network of security devices and end-user systems.

• Participate in threat modeling collaboration with other members of the security team.

• Automate repetitive tasks and drive efficiencies so the SOC can operate at high efficiency.

• Assist with incident response as events are escalated, including triage, remediation, and documentation.

• Manage security event investigations, partnering with other departments (e.g., IT) as needed.

• Aid in threat and vulnerability research across event data collected by systems.

• Investigate and document events to aid incident responders, managers and other SOC team members on security issues and the emergence of new threats.

• Work alongside other security team members to hunt for and identify security issues generated from the network, including third-party relationships.

• Share information as directed with other team members and ISACs.

• Seek opportunities to drive efficiencies.

• Evaluate SOC policies and procedures and recommend updates to management as appropriate.

• Develop metrics and scorecards to measure risk to the organization.

• Adhere to service level agreements (SLAs), metrics and business scorecard obligations for ticket handling of security incidents and events.

• Partner with the security engineering team to improve tool usage and workflow, as well as with the advanced threats and assessment team to mature monitoring and response capabilities.

• Leverage knowledge in multiple security disciplines, such as Windows, Unix, Linux, data loss prevention (DLP), endpoint controls, databases, wireless security, and data networking, to offer global solutions for a complex heterogeneous environment.

• Maintain working knowledge of advanced threat detection as the industry evolves.

• Perform other duties as assigned.