SOC Analyst

About the Role

As a SOC Analyst at Verint, you will be a vital first-line responder within our 24x7 Operations Center, handling security incidents and technical issues. This internal triage role involves assessing inbound security data and communications to identify threats and analyze triggered security events. You will contribute to the Global SOC Infrastructure support, managing ticketing and event handling for all Verint security applications. Your responsibilities will include in-depth analytical reviews of triggered SOC events and assisting in the development of Statement of Work (SOW), Standard Operating Procedures (SOPs), and Key Performance Indicators (KPIs).

Responsibilities

• Be prepared to work a rotating 24/7 shift schedule, including nights and weekends.
• Respond swiftly to all triggered security events and assist in escalated incident management.
• Conduct deep analytical reviews of triggered events, providing detailed reports for T1-T2 incidents.
• Utilize your understanding of IT infrastructure and networking to efficiently dispatch security events.
• Apply SOC best practices and process frameworks to drive continuous improvement.
• Demonstrate strong communication skills, interacting effectively with diverse individuals. Success hinges on the timely and effective dispatch of both security and communication triage events.
• Contribute to the creation and modification of playbooks and processes to enhance SOC performance and efficiency.
• Actively pursue learning in new security domains, promoting the adoption of new technologies and security postures.
• Engage with and execute security incident response plans, covering preparation, identification, containment, eradication, recovery, and lessons learned.
• Assist in the development of documentation and the implementation of new policies and procedures.
• Learn and help train others on new security models, fostering a desire to advance security awareness, processes, and knowledge.

Qualifications

Minimum Requirements

• 1-4 years of progressive experience in information security.
• Bachelor's degree in Information Technology, Cyber Security, or a related field.
• Proficiency in Splunk, Cisco Security suite, Active Directory (AD), ServiceNow, and Microsoft Azure.
• Solid knowledge of security fundamentals, including malware, firewalls, IDS/IPS, Windows operating systems, AD, networking, and security auditing.
• Good communication skills.

Desired Skills

• SANS certifications such as GCIA, GMON, GCED, or GSEC.
• Security+ certification.
• Demonstrated understanding and application of the MITRE ATT&CK framework.