SOC Analyst, US SOC

About the Role

Thrive is seeking a SOC Analyst 1 to join its Security Operation Center. This role is hybrid in the Tampa, FL office and focuses on continuously monitoring and improving customers' security posture, preventing, detecting, analyzing, and responding to cybersecurity incidents.

Key Responsibilities

• Perform security event monitoring using SIEM from multiple sources.
• Investigate intrusion attempts, differentiate false positives from true intrusion attempts, and perform analysis of exploits.
• Proactive monitoring and response of known and/or emerging threats.
• Carry out Thrive's information security strategy for over 400 clients.
• Analyze data from the SOC and SIEM to determine if further analysis is needed.
• Work within Thrive's security standards and best practices, and recommend future enhancements.
• Manage clients' security awareness training.
• Analyze vulnerability scans and determine remediation steps.
• Stay abreast of security events and techniques to protect clients.
• Build awareness through training and education.

Requirements & Tech Stack

• SIEM (Security Information and Event Management)
• TCP/IP, computer networking, routing, and switching
• IDS/IPS, penetration and vulnerability testing
• Firewall and intrusion detection/prevention protocols
• Windows, UNIX, and Linux operating systems
• Network protocols and packet analysis tools
• EDR, Anti-virus, and anti-malware
• Content filtering
• Email and web gateway
• Understanding of cybersecurity threats, and experience with incident response standards and procedures
• Comprehension of good security practices
• Professional experience in a system administration role supporting multiple platforms and applications
• Ability to communicate network security issues to peers and management

Qualifications

• Ability to analyze a large amount of data from various sources and use this information to solve complex problems and make good decisions.
• Ability to work effectively in a team environment and collaborate within the team and other stakeholders.
• Computer Networking & Security
• Vulnerability Discovery and Analysis
• Operating System Internals
• Familiarity with TCP/IP network protocols, application layer protocols (e.g., HTTP, SMTP, DNS, etc.)
• Excellent Written and Verbal Communication Skills

Preferred Skills:

• Knowledge of common Windows and Linux/Unix system calls and APIs
• Understand Anti-Virus
• Knowledge of programming languages
• Knowledge of internal file structures for file formats commonly associated with malware (e.g., OLE, RTF, PDF, EXE, etc.)