SOC Tier 3 Analyst
Crownsville, MD, United States2w ago
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
Skills
incident responsesiemthreat intelligence
About the role
Job Title: SOC, Tier 3 Analyst
Job Location: 100 Community Place, Crownsville, MD (2 Days Onsite Hybrid)
Job Duration: Fulltime
Responsibilities: • Incident Response & Forensics: Plan, initiate, and conduct forensic investigations on compromised systems; perform root cause and scope-of-impact analysis; create detailed forensic reports • Malware & Tool Analysis: Support malware analysis of attacker tools and techniques; identify and analyze malicious payloads • Tool & Process Development: Train SOC analysts on SIEM tools (e.g., Sentinel), develop and tune detection rules, and assist in creating new SOC monitoring processes • Threat Intelligence & Hunting: Correlate actionable security events, review threat data, develop custom detection signatures, and conduct threat hunting to identify advanced threats • Technical Leadership: Contribute to technical briefings, develop incident response procedures, and ensure adherence to operational and technical standards • On-Call Support: May require availability outside regular hours or on weekends to respond to critical incidents
Responsibilities: • Incident Response & Forensics: Plan, initiate, and conduct forensic investigations on compromised systems; perform root cause and scope-of-impact analysis; create detailed forensic reports • Malware & Tool Analysis: Support malware analysis of attacker tools and techniques; identify and analyze malicious payloads • Tool & Process Development: Train SOC analysts on SIEM tools (e.g., Sentinel), develop and tune detection rules, and assist in creating new SOC monitoring processes • Threat Intelligence & Hunting: Correlate actionable security events, review threat data, develop custom detection signatures, and conduct threat hunting to identify advanced threats • Technical Leadership: Contribute to technical briefings, develop incident response procedures, and ensure adherence to operational and technical standards • On-Call Support: May require availability outside regular hours or on weekends to respond to critical incidents