Security Analyst

About the Role

We are seeking a confidential client hire for InterSources Inc as a Security Analyst – Project Lead. In this critical position, you will support SOC operations by monitoring and investigating security events, proactively hunting threats, refining detection and response processes, and coordinating incident response efforts with internal teams and state agencies.

Key Responsibilities

• Event Monitoring: Correlate security events across SIEM, EDR, IDS/IPS, and threat intelligence platforms to identify suspicious activity and emerging threats in real-time.
• Incident Investigation: Analyze attack patterns, determine root causes, assess impact, and escalate critical incidents to Tier 3 teams for resolution. Investigate phishing campaigns, malware infections, unauthorized access attempts, and policy violations.
• Threat Hunting: Execute proactive threat hunting using up-to-date threat intelligence, Indicators of Compromise (IOCs), and MITRE ATT&CK tactics, techniques, and procedures (TTPs).
• Dashboards & Reporting: Design and maintain dynamic security dashboards, detailed incident reports, investigation timelines, and comprehensive post-incident documentation.
• Tool Optimization: Fine-tune SIEM detection rules, alert thresholds, and correlation logic to reduce false positives and enhance overall threat detection efficacy. Collaborate with engineering teams to optimize monitoring tools and integrate diverse intelligence feeds.
• Documentation & Playbooks: Develop and continuously update SOC playbooks, incident response procedures, runbooks, and troubleshooting guides.
• Incident Management: Coordinate containment, remediation, recovery strategies, and preventative measures with internal stakeholders and state agencies to minimize downtime and risk.