Sr. Information Security Analyst (SOC/SIEM (Splunk, CrowdStrike, Scripting)

·         Monitor and analyze security alerts from SIEM, EDR, and vulnerability scanners.

·         Assist in investigating medium to high-severity incidents with guidance.

·         Contribute to incident response playbook updates and automation improvements.

·         Correlate threat intelligence with internal events to assess impact.

·         Support forensic analysis and evidence collection with MDR/MSSP partners.

·         Support Security Engineers on any technical requirements.

·         Develop basic scripts (e.g., Python, PowerShell) to automate repetitive security tasks.

·         Support integration and tuning of security tools (SIEM, SOAR, EDR).

·         Assist in building dashboards and reports for security metrics.

·         Review and validate automated scan results (e.g., Veracode).

·         Identify false positives and provide remediation guidance.

·         Support CI/CD pipeline security integration and issue resolution.

·         Conduct CVE research and impact analysis using CVSS scoring.

·         Assist in prioritizing and tracking remediation efforts.

·         Support development of vulnerability dashboards and reports.

·         Support audit and compliance activities by maintaining documentation.

·         Contribute to security procedures, knowledge base articles, and metrics reporting.

·         Mentor junior team members on investigation and documentation practices.

·         Participate in onboarding and knowledge sharing activities.

·         Contribute to team process improvements and tool evaluations.

• Solid understanding of network security fundamentals (TCP/IP, SSL, PKI, RADIUS, DNS, routing/switching)
• Proficiency with multiple security tools such as Splunk, Check Point, Cisco ASA, Imperva WAF, Carbon Black, Forcepoint, Qualys
• Intermediate scripting capabilities in PowerShell, Python, or shell scripting with ability to develop basic automation
• Good knowledge of security vulnerabilities, attack vectors, and the OWASP Top 10
• Solid understanding of operating systems security for both Windows and Linux environments, and, working knowledge of cloud security concepts, preferably AWS
• Proficient in Git, GitLab, and commercial software scanning solutions
• Good knowledge of Agile planning processes and associated tools (Jira, Rally, Confluence)
• Familiarity with ServiceNow for case management and workflow development
• Solid knowledge of threat modeling methodologies
• Good understanding of the NVD, CVEs, and CVSS 3.0 scoring systems
• Knowledge of incident response practices and basic forensic analysis techniques
• Understanding of APIs and common security implementation methods
• Strong communication skills with ability to present security topics to technical and business audiences
• Developing leadership and mentoring capabilities
• Good analytical thinking and problem-solving skills
• Ability to work independently with moderate supervision
• Basic project coordination skills