Role Overview

Be a part of an exciting and growing team that deals with information security attacks and incident response situations on a daily basis! As a key member of the team, you will work with our high visibility clients and receive complex alerts and respond to activity within the clients’ environment detected by using Secureworks Managed Security Services and tools. You will be responsible for investigating high alerts, determining the source of the threat, the extent to which client assets have been compromised, making recommendations and implementing remediation.

Key Responsibilities

• This role will function as a SOC Analyst. You will receive alerts/events/tickets detected by Dell SecureWorks Managed Security Services and respond by performing different activities within the client’s environment
• In this position you will be responsible for investigating high alerts, determining the source of the threat, the extent to which client assets have been compromised, making recommendations for remediation, and assisting in the implementation.
• Perform analysis of security events from multiple sources including but not limited to events from SIEM tools (Splunk, CTP, ArchSight), network and host based IDS, firewall logs, system logs (Unix & Windows), mainframes, mid-range, applications and databases.
• Collaborate with Line of Business technical teams for resolution and mitigation of detected issues.
• Document the actions taken for audit, regulatory and legal purposes within approved event tracking system.
• Routinely interact with vulnerability and threat management teams and incorporate feedback into information security applications
• Supervise different incident response actions with internal and external teams while owning the responsibility for the incident/event until complete closure