Job Description: Position Title: SOC Security Analyst (Microsoft Server Support, Tanium Security, SIEM) Overview: We are seeking a skilled SOC Security Analyst with specialized expertise in Microsoft server support, Tanium security, and SIEM (Security Information and Event Management) technologies. In this role, you will be responsible for leveraging your in-depth knowledge of Microsoft server environments, Tanium endpoint security solutions, and SIEM platforms to enhance our organization's cyber defense capabilities and mitigate security risks effectively.Key Responsibilities:
Microsoft Server Support: - Provide expert-level support for Microsoft Windows Server environments, including installation, configuration, and maintenance of server operating systems and applications.
- Perform regular security hardening and patch management activities to ensure the integrity and resilience of server infrastructure.
- Collaborate with IT teams to troubleshoot server-related issues and implement security best practices to protect against vulnerabilities and exploits.
Tanium Security Operations: - Utilize Tanium endpoint security solutions to monitor, manage, and secure endpoints across the organization's network.
- Configure and deploy Tanium agents to endpoints, ensuring comprehensive visibility and control over endpoint security posture.
- Develop custom Tanium queries and scripts to identify security threats, vulnerabilities, and compliance gaps in real-time.
SIEM Management and Analysis: - Manage and maintain SIEM platforms, such as Splunk, logscale, falcon NGSEIM, to collect, correlate, and analyze security event data from disparate sources.
- Develop and tune SIEM rules, alerts, and correlation logic to improve detection accuracy and reduce false positives.
- Conduct thorough analysis of SIEM alerts and logs to identify potential security incidents, anomalies, and indicators of compromise (IOCs).
Other technologies Incident Response and Investigation: - Lead incident response efforts related to Microsoft server breaches, Tanium endpoint security incidents, and SIEM-generated alerts.
- Conduct detailed forensic analysis and investigation of security incidents to determine the scope, impact, and root cause.
- Work closely with cross-functional teams to contain, eradicate, and recover from security breaches, following established incident response procedures.
Documentation and Reporting: - Maintain accurate documentation of configurations, procedures, and incident response activities related to Microsoft servers, Tanium security, and SIEM operations.
- Generate comprehensive reports on security incidents, investigations, and remediation efforts for internal stakeholders and regulatory compliance purposes.
Qualifications:
- Bachelor's degree in Computer Science, Information Security, or related field (or equivalent mature experience).
- Extensive experience in Microsoft server administration and support, including Active Directory, Group Policy, and Windows Server roles and features.
- Proficiency in deploying, configuring, and managing Tanium endpoint security solutions.
- Strong understanding of SIEM concepts, architecture, and implementation, with experience working with SIEM platforms.
- Relevant certifications such as MCSE (Microsoft Certified Solutions Expert), Tanium Certified Administrator, and SIEM vendor certifications are highly desirable.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work independently and collaboratively in a fast-paced SOC environment.
Benefits:
- Competitive salary and benefits package.
- Opportunities for professional development and training.
- Work with cutting-edge technologies in cybersecurity.
- Contribute to enhancing the organization's security posture and resilience.