City

The Security Operations Center (SOC) Cyber Threat Analyst will be part of the SOC Team. This center monitors analyses and responds to infrastructure threats and vulnerabilities on a 24x7 basis. SOC Analysts are responsible for performing the day-to-day monitoring of Citi's environment analyzing responding to events as necessary and providing technical support. These operations are critical since they provide Citi's first line of defense against infrastructure attacks.Responsibilities:<ul><li>Perform security monitoring, assessment and analysis on events generated by Intrusion Detection/Prevention tools, anomaly detection systems, antivirus and EDR systems, email security gateway, proxy devices, cloud security solution, data leakage prevention system via SIEM which requires demonstrable security incident response experience</li><li>Assess and investigate potential security threats sourced from other channel leveraging variety of data and tools</li><li>Drive a continuous effort to improve SOC process. Execute adhoc tasks or small projects as needed.</li><li>Undertakes root cause analysis of events, perform risk assessment on threat or vulnerability and make recommendations to improve detection capability</li><li>Drive a continuous effort to review and fine tune detection rule/use case/signature to reduce unnecessary noise and increase alert fidelity</li><li>Handle threat incidents calls like DDOS incidents, adhoc high severity cases including collaboration and escalation to other support groups</li><li>Participate in daily and adhoc conference calls, self-assessment processes and documentation related tasks</li></ul>Qualifications:<ul><li>4-8 years of relevant experience</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Understand the life cycle of network threats, web attacks, attack vectors, and methods of exploitation to conduct analysis across packet captures, network traffic, web logs, endpoint logs and others to identify unusual behavior that may indicate malicious activity</li><li>Proven and strong analytical skills</li><li>Attentive to detail and possess a strong investigative mindset</li><li>A good team player, self driven and able to act as individual contributor</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Relevant cyber security certification is a bonus </li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Singapore

AVP - Security Operation Center (SOC) Cyber Threat Analyst - Hybrid

The Security Operations Center (SOC) Cyber Threat Analyst will be part of the SOC Team. This center monitors analyses and responds to infrastructure threats and vulnerabilities on a 24x7 basis. SOC Analysts are responsible for performing the day-to-day monitoring of Citi's environment analyzing responding to events as necessary and providing technical support. These operations are critical since they provide Citi's first line of defense against infrastructure attacks.Responsibilities:<ul><li>Perform security monitoring, assessment and analysis on events generated by Intrusion Detection/Prevention tools, anomaly detection systems, antivirus and EDR systems, email security gateway, proxy devices, cloud security solution, data leakage prevention system via SIEM which requires demonstrable security incident response experience</li><li>Assess and investigate potential security threats sourced from other channel leveraging variety of data and tools</li><li>Drive a continuous effort to improve SOC process. Execute adhoc tasks or small projects as needed.</li><li>Undertakes root cause analysis of events, perform risk assessment on threat or vulnerability and make recommendations to improve detection capability</li><li>Drive a continuous effort to review and fine tune detection rule/use case/signature to reduce unnecessary noise and increase alert fidelity</li><li>Handle threat incidents calls like DDOS incidents, adhoc high severity cases including collaboration and escalation to other support groups</li><li>Participate in daily and adhoc conference calls, self-assessment processes and documentation related tasks</li></ul>Qualifications:<ul><li>4-8 years of relevant experience</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Understand the life cycle of network threats, web attacks, attack vectors, and methods of exploitation to conduct analysis across packet captures, network traffic, web logs, endpoint logs and others to identify unusual behavior that may indicate malicious activity</li><li>Proven and strong analytical skills</li><li>Attentive to detail and possess a strong investigative mindset</li><li>A good team player, self driven and able to act as individual contributor</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Relevant cyber security certification is a bonus </li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.#LI-Hybrid-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

The Security Operations Center (SOC) Cyber Threat Analyst will be part of the SOC Team. This center monitors analyses and responds to infrastructure threats and vulnerabilities on a 24x7 basis. SOC Analysts are responsible for performing the day-to-day monitoring of Citi's environment analyzing responding to events as necessary and providing technical support. These operations are critical since they provide Citi's first line of defense against infrastructure attacks.Responsibilities:<ul><li>Perform security monitoring, assessment and analysis on events generated by Intrusion Detection/Prevention tools, anomaly detection systems, antivirus and EDR systems, email security gateway, proxy devices, cloud security solution, data leakage prevention system via SIEM which requires demonstrable security incident response experience</li><li>Assess and investigate potential security threats sourced from other channel leveraging variety of data and tools</li><li>Drive a continuous effort to improve SOC process. Execute adhoc tasks or small projects as needed.</li><li>Undertakes root cause analysis of events, perform risk assessment on threat or vulnerability and make recommendations to improve detection capability</li><li>Drive a continuous effort to review and fine tune detection rule/use case/signature to reduce unnecessary noise and increase alert fidelity</li><li>Handle threat incidents calls like DDOS incidents, adhoc high severity cases including collaboration and escalation to other support groups</li><li>Participate in daily and adhoc conference calls, self-assessment processes and documentation related tasks</li></ul>Qualifications:<ul><li>At least 3 years of relevant experience</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Proven influencing and relationship management skills</li><li>Understand the life cycle of network threats, web attacks, attack vectors, and methods of exploitation to conduct analysis across packet captures, network traffic, web logs, endpoint logs and others to identify unusual behavior that may indicate malicious activity</li><li>Proven and strong analytical skills</li><li>Attentive to detail and possess a strong investigative mindset</li><li>A good team player, self driven and able to act as individual contributor</li><li>Consistently demonstrates clear and concise written and verbal communication</li><li>Relevant cyber security certification is a bonus</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent experience</li></ul>This job description provides a high-level review of the types of work performed. Other job-related duties may be assigned as required.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Security Operation Center (SOC) Cyber Threat Analyst (Hybrid)

ION Group

The Role:The SOC Analyst is a global, groupwide role in ION’s Security function and will support the Group Security strategy and operational excellence through the identification, mitigation and remediation of information security risks to the business. This role reports to the SOC Manager, who reports to the Global Head of IT Security.As a member of the ION Security team, the successful candidate will be responsible monitoring and tuning technical security controls to protect ION’s information technology (IT) systems and networks across the group and will help ION evolve its technical security posture to keep up with the ever-changing security landscape and emerging threats. This role requires shift work in the support of a 24x7 globally coordinated operation. The SOC Analyst’s other responsibilities include meeting KPI targets defined by management and performing the various other duties assigned by the SOC Manager and Global Head of IT Security.We are looking for a hard-working, dedicated, and motivated individual. Excellent communication skills are a must and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally the candidate will have come from related security and systems administration roles, focusing on workstation, server and network technologies.<h3>Duties and Responsibilities</h3><ul><ul><li>This role requires some overnight, weekend and 24x7 on-call activities.</li><li>The primary responsibilities of this role are to:</li>1) Protect and defend: identify, analyze and mitigate threats to IT systems and/or networks.<li>Use defensive measures and information collected from a variety of sources to identify, analyze, and report events that occur or might occur within the network to protect information, information systems, and networks from threats.</li><li>Respond to security alerts to mitigate immediate and potential threats. Use mitigation, preparedness, and response and recovery approaches, as needed, to maintain information security and minimize impacts.</li><li>Conduct assessments of threats and vulnerabilities; determine deviations from acceptable configurations, enterprise or local policy; assess the level of risk; and develop and/or recommend appropriate mitigation countermeasures.</li>2)Operate and maintain: configure, tune, maintain and operate key security controls, technologies, and other risk mitigations.<li>As a member of the SOC team, it is expected that the person in this role will:</li><li>Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs and deliver security projects in line with management-defined priorities and deadlines.</li><li>Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.</li><li>Perform threat hunting and review, triage, investigate and escalate security alerts raised by security tools, technologies, and services (e.g., endpoint security, network security, DLP, SIEM, reported phishing emails, etc.)</li><li>Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents. </li><li>Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities.</li><li>Configure, customize, tune, manage, troubleshoot, and maintain to ensure effective and efficient operation of security technologies, such as SIEM, endpoint security, secure web gateway, CASB, DLP, email security, intrusion detection/prevention systems, etc. This may also include scripting, automation, and orchestration across the various platforms.</li><li>Define, document, and follow approved processes for all the responsibilities includes in this job description. Create and maintain documentation for systems, including design and operation.</li><li>Review systems, configurations, and process to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results.</li><li>Respond to information security-related inquiries and requests.</li></ul></ul><h3>Required Skills, Qualifications and Experience</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include: PenTest+, Security+, OSCP, CCSP, CEH, GCIH, GMON</li><li>3+ years' experience in information technology and/or information security</li><li>Must have fundamental programming/scripting capabilities (e.g. python, PowerShell, bash, etc.)</li><li>The following general characteristics are required:</li><li>A team player with the ability to work independently and unsupervised </li><li>Ability to own delegated tasks and see them through to completion</li><li>Ability to manage time and prioritize work to maximize productivity</li><li>Excellent communication skills (both written and verbal)</li><li>Exceptional attention to detail and quality</li><li>Excellent problem-solving techniques and trouble analysis skills</li><li>The candidate should have a good knowledge of:</li><li>Endpoint security concepts, controls, and best practices for workstation (e.g. Windows and Mac) and server (e.g. Windows and Linux) operating systems</li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices</li><li>Cryptography fundamentals and data security controls and best practices</li><li>Forensic investigation techniques</li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.</li></ul></ul>About usWe’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world. Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.With 10,000 employees and offices in more than 40 cities around the globe, ION is a rapidly expanding and dynamic group.At ION, we offer careers that provide many opportunities: To invent. To design. To collaborate. To build. To transform businesses and empower people around the world to do more, faster and better than before. Imagine what you can do and experience. This is where you can do your best work.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.

Noida

Security Operations Center (SOC) Analyst

Granicus

Granicus is the leading provider of citizen engagement technologies and services for the public sector, bringing governments closer to the people they serve with the first-and-only Civic Engagement Platform. Granicus works with more than 5,500 government organizations and connects more than 280 million people in the largest Citizen Subscriber Network of its kind.Granicus provides technology and services that empowers government organizations to create seamless digital experiences for the people they serve. By offering the industry’s leading cloud-based solutions for communications, content management, meeting and agenda management, and digital services to over 4,000 public sector organizations, Granicus helps turn government missions into quantifiable realities.Granicus is looking to mature and improve its security operations capabilities and is looking for someone to provide leadership and expertise to protect the confidentiality, integrity, and availability of the organization. If you’re a self-starter who wants to help drive repeatable, high quality processes and deliver high value outcomes in the areas of information security monitoring, detection, response, and threat hunting then we want to hear from you. Our core beliefs are building trust within the organization as well as with our clients, building strong intergroup relationships, evolving knowledge, and always being on the lookout for ways to improve. 
<h3>What your impact will look like here</h3>
<ul>
<li>-        Serving in the front lines defending against cyber security threats</li><li>-        Monitoring Information Security tools and responding to alerts</li><li>-        Follow established Incident Response playbooks to address security threats in a consistent manner</li><li>-        Investigate and analyse security events and recommend remediation actions</li><li>-        Document and communicate incident status to stakeholders</li><li>-        Execute threat hunting procedures to proactively find security concerns</li><li>-        Assist in the development and testing of new procedures and processes</li><li>-        Continuous learning and improvement</li></ul>
<h3>You will love this job if you have</h3>
<ul>
<li>-        One to three years of experience in Information Security role</li><li>-        Passion for finding and remediating cyber security threats</li><li>-        Working knowledge of operating systems internals, Windows, Mac, Linux  </li><li>-        Working knowledge of networking concepts, including TCP/IP, DNS, routing, firewalls</li><li>-        Working knowledge of common threat actor TTPs</li><li>-        Excellent written and verbal communication skills</li><li>-        Ambition for career growth within Information Security</li><li>-        Industry standard certifications like CISSP, CISM, GSEC, GCIH, etc</li></ul>

Bangalore

SOC Analyst - 556

Apply to SOC Analyst Cyber Security Jobs in companies remotely and near you. New SOC Analyst Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
AVP - Security Operation Center (SOC) Cyber Threat Analyst - Hybrid at City	Full Time Soc Analyst Analyst Incident Response
AVP - Security Operation Center (SOC) Cyber Threat Analyst - Hybrid at City	Full Time Soc Analyst Analyst Incident Response
Security Operation Center (SOC) Cyber Threat Analyst (Hybrid) at City	Full Time Soc Analyst Analyst Incident Response
Security Operations Center (SOC) Analyst at ION Group	Full Time Forensic Soc Analyst Audit Analyst
SOC Analyst - 556 at Granicus	Full Time CISM Soc Analyst Analyst Incident Response

SOC Analyst Cyber Security Jobs

0 SOC Analyst Cyber Security Jobs. Page 1 of 1

5 closed soc analyst cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Soc Analyst Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category