Cybersecurity Operation Center (Csoc) Tier 3 Analyst
Current• Monitor 200,000+ endpoints (Linux & Windows) and 8,000+ network devices and servers• Acquire and analyze endpoints and network artifacts for unauthorized activity and document investigative steps in a centralized ticketing system• Analysis and correlate events to determine the scope of an event or incident• Tune and monitor alerting tools (EDR, IDS/IPS, SIEM, mailbox, helpline, etc.) to reduce false positive and alert fatigue • Share known and vetted IOCs and TTPs to create new signals applicable to the environment to rapidly detect nefarious activity• Mentor junior SOC analysts to cultivate a team-oriented environment