Текст заказа
Note: We are hiring for this role at either the SOC Analyst I or SOC Analyst II level. The level of the offer will be based on your experience and skills, so we encourage you to apply even if you don’t meet every qualification listed for SOC II.
Company Overview
ProCircular is a nationally recognized cybersecurity services firm built on trust, sound judgment, and long-term relationships. We work across security assessment, monitoring, incident response, advisory, AI risk, and compliance for organizations in healthcare, finance, manufacturing, education, transportation and logistics, and government, where uptime, resilience, and risk management are operational priorities. We invest in our own cybersecurity and AI research and tooling so clients benefit from what’s coming, not just what’s already widely known.
Our clients come to us for more than a toolset, a score, or a one-time deliverable. They need practitioners who can work alongside their teams to assess exposure, investigate real threats, and turn technical risk into clear action.
Position Summary
This position is responsible for conducting the technical aspects of response operations for critical events. These operations include immediate containment, investigation, and management of remediation actions, as well as enhancing defenses with the new knowledge acquired throughout the response process. This role requires the ability to develop skills on multiple security products and work closely with the staff of higher tiers, service delivery, and clients to provide ongoing communication of status and timely response to tickets.
To perform this job successfully, an individual must be able to perform each essential job function satisfactorily. The lists below represent this position's required and preferred knowledge, skill, and abilities.
Essential Job Functions (include but are not limited to the following)
(SOC I) Review the latest alerts to determine relevancy and urgency.
(SOC II) Respond to the latest alerts to determine relevancy and urgency.
(SOC I) Create new trouble tickets for alerts that signal an incident and require Tier 2 / Incident Response review.
(SOC II) Triage escalated trouble tickets for alerts that signal an incident and require Tier 3 / Incident Response review.
(SOC I) Eyes on glass monitoring of security incidents within established customer Service Level Agreements.
(SOC II) Monitor advanced security alerts/incidents within established customer Service Level Agreements.
(SOC I) Assist as required in the remediation of critical information security incidents.
(SOC II) Assist SOC Analyst I as required in the remediation of critical information security incidents.
Review trouble tickets generated by other team members.
Review and collect asset data (configs, running processes, etc.) on these systems for further investigation.
First responder to security event escalations via email, phone, and ticket.
Communicate positively with clients and escalate any issues and messages accordingly.
Manage and monitor assigned security platforms while following established procedures.
Complete assigned projects on time and with excellent quality.
Practice continual self-improvement thru education, training, and certification.
Write documentation for tasks, procedures, and knowledgebase articles needed to support the understanding and efficiency of SOC services.
Assist with determining client needs and obtaining clarification as required to appropriately triage client requests to the appropriate resource.
Flexible on-call as needed to support 24/7/365 security operations.
Operate with integrity and accountability.
Uphold the values of ProCircular and abide by the Company handbook.
Other duties as assigned.
Position Requirements
The requirements listed below represent the knowledge, skills, and abilities required. Applicants who do not possess the requirements for a job at the time of hire will not be considered for the position. Reasonable accommodations may be available for individuals with disabilities to perform essential functions.
Required Skills and Experience:
Knowledge of SOC solutions (EDR, SOAR, SIEM).
Knowledge of core security devices such as firewalls, network, and host-based intrusion detection systems, web applications, AV, WAF, Proxy, and operating system logs.
Ability to interpret IOCs.
Develop and maintain content and reporting.
Technical-minded and driven.
Experience with Windows and Linux.
Experience with network technologies and systems, security, and network monitoring tools.
Thorough understanding of the latest security principles, techniques, and protocols.
Capable of working effectively independently and in a team environment
Must be self-motivated, goal and detail-oriented
Flexible and adaptable to changing work environment
Ability to prioritize multiple tasks and manage time efficiently
Must be able to use Microsoft Office Suite efficiently
Proficient in at least one programming and scripting language (e.g., Python).
Basic Firewall rule and policy fundamentals
Good written and oral communication skills. Natural curiosity to get to the root cause. Ability to remain calm under pressure.
Experience working with customers via the phone.
(SOC II) Experience in networks communications, network/data analysis, packet capture analysis, malware detection, and custom intrusion signature development concepts
Desired Skills and Experience:
Experience with various Cybersecurity products, but not limited to SIEM, SOAR, EDR, and XDR.
Hands-on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
Experience working with internal and client ticketing and knowledge base systems for Incident and Problem Tracking, as well as procedures. (e.g., Jira, Confluence, etc.).
Experience writing suppression and detection rules.
Knowledge of Active Directory Environments.
Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
Understanding various server-grade applications such as DBMS, Exchange, DNS, SMTP, IIS, Apache, SharePoint, Active Directory, Identity Management, Vulnerability\Patch Management, LDAP, SQL, and others.
Prior experience working with container-based technologies such as Docker and Kubernetes.
Prior consulting experience.
(SOC II) Knowledgeable in cybersecurity analysis/operations, systems administration, information security, vendor, troubleshooting, business processes, information systems, SQL, Linux, risk management, Java, Python, PowerShell, and JSON.
(SOC II) Knowledgeable in network security, advanced network analysis, fundamental cyber analyst/operator, network traffic analysis, information security, information systems, network troubleshooting, security operations, and cyber threat modeling
(SOC II) Able to address incident handling (identification, overview, and preparation), buffer overflow, client attacks, covering tracks (networks, systems), denial of service attacks, incident handling (containment, eradication, recovery, and lessons learned), network attacks, password attacks, reconnaissance, scanning (discovery and mapping, techniques and defense), session hijacking and cache poisoning, methods for maintaining access, web applications attacks, worms, bots, and bot-nets
(SOC II) Basic knowledge and understanding of addressing new attack vectors (emphasis on cloud computing technology, mobile platforms, and tablet computers), new vulnerabilities, existing threats to operating environments, advanced IDS concepts, applications protocols, concepts of TCP/IP and the link layer, DNS, fragmentation, IDS fundamentals and initial deployment (e.g., snort, Zeek), IDS rules (e.g., sno