Senior SOC Analyst

Started by a former school district network admin in 2017, the business has grown almost entirely through referrals. We support about 60 local businesses, most within 30 minutes of the office.

Role overview

Cresswell IT is hiring a Senior SOC Analyst to work remotely from the US. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. You can work from home anywhere in the US. We have no office requirement.

Job duties

• Write and update SOC runbooks and playbooks.
• Tune noisy detection rules with the security engineering team.
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests.
• Escalate confirmed incidents and follow the incident response plan.
• Analyze reported phishing emails, check headers and URLs, and purge malicious messages.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.

Required qualifications

• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Working knowledge of SIEM and EDR tools.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Basic scripting in PowerShell or Python.

Schedule: Second shift, 2:00 PM to 10:30 PM, Monday to Friday

Benefits

Salary: $132,000 - $155,000 a year

• Short- and long-term disability.
• Stock options.
• Medical, dental and vision insurance.
• Vision insurance.
• Paid time off.
• 11 paid holidays.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Cresswell IT.