Security Operations Center (SOC) Analyst /w EDR and Incident Handling (ONLY US Cit )
Remote
Long-term Contract
W2 employment without sponsorship
American Computer Services, Inc. is seeking an experienced Security Operations Center (SOC) Analyst with strong expertise in Endpoint Detection and Response (EDR) tools and cybersecurity incident handling. In this role, you will be responsible for monitoring, analyzing, and responding to events and alerts supporting enterprise IT systems.
The ideal candidate thrives in a fast-paced environment with aggressive timelines and brings significant experience in CYBERSECURITY INCIDENT HANDLING and EDR TOOL MANAGEMENT (specifically CrowdStrike or comparable platforms).
Required Skills & Experience
• Hands-on experience working with Endpoint Detection and Response (EDR) tools.
• Proven experience responding to and analyzing cybersecurity events and incidents.
• Experience working with CrowdStrike or comparable EDR tools.
• Demonstrated experience working effectively in high-pressure, fast-paced environments.
• Experience performing Tier 1 troubleshooting, including log collection, documentation review, and appropriate escalation.
• Experience supporting incident response activities up to the preliminary forensics stage.
• Experience following detailed operational procedures to analyze, escalate, and support remediation of critical security incidents.
Day-to-Day Responsibilities
• Provide security monitoring and response efforts for, and in coordination with, the Security Operations Center (SOC).
• Monitor, analyze, and respond to cybersecurity events, alerts, and incidents.
• Lead outreach and coordination with internal and external partners.
• Take appropriate actions to protect IT assets from potential incidents and threats.
• Document and report changes, trends, and implications related to evolving cybersecurity tools, systems, and solutions.
• Follow SOC processes and assist ISD Security Engineers and OCIO support teams during alerts, events, and incidents.
• Submit new events and update existing events within the SOC ticketing system.
• Provide phone and email support to state agencies and participating partners during alerts, events, and incidents.
• Support Tier 1 SOC Analysts in triaging cybersecurity events, alerts, and incidents.
• Monitor EDR tools and perform initial assessment and data gathering for alerts.
• Assist with SOC metrics, reporting, and communications.
• Provide off-hours or ad-hoc shift support as required.
Soft Skills Include:
• Strong communication, reporting, and documentation abilities to interact effectively with diverse stakeholders.
• Proven ability to collaborate effectively with partners across varying technical backgrounds.
• Commitment to maintaining up-to-date knowledge on relevant cybersecurity technologies and evolving threat landscapes.
• A commitment to a culture that cares about team members and takes pride in providing innovative security solutions for the benefit of Iowans.
Education/Certifications:
• Bachelor’s degree in Cybersecurity, Computer Science, MIS, or a related field, and/or relevant professional certifications in combination with work experience.
Apply tot his job
Apply To this Job
Long-term Contract
W2 employment without sponsorship
American Computer Services, Inc. is seeking an experienced Security Operations Center (SOC) Analyst with strong expertise in Endpoint Detection and Response (EDR) tools and cybersecurity incident handling. In this role, you will be responsible for monitoring, analyzing, and responding to events and alerts supporting enterprise IT systems.
The ideal candidate thrives in a fast-paced environment with aggressive timelines and brings significant experience in CYBERSECURITY INCIDENT HANDLING and EDR TOOL MANAGEMENT (specifically CrowdStrike or comparable platforms).
Required Skills & Experience
• Hands-on experience working with Endpoint Detection and Response (EDR) tools.
• Proven experience responding to and analyzing cybersecurity events and incidents.
• Experience working with CrowdStrike or comparable EDR tools.
• Demonstrated experience working effectively in high-pressure, fast-paced environments.
• Experience performing Tier 1 troubleshooting, including log collection, documentation review, and appropriate escalation.
• Experience supporting incident response activities up to the preliminary forensics stage.
• Experience following detailed operational procedures to analyze, escalate, and support remediation of critical security incidents.
Day-to-Day Responsibilities
• Provide security monitoring and response efforts for, and in coordination with, the Security Operations Center (SOC).
• Monitor, analyze, and respond to cybersecurity events, alerts, and incidents.
• Lead outreach and coordination with internal and external partners.
• Take appropriate actions to protect IT assets from potential incidents and threats.
• Document and report changes, trends, and implications related to evolving cybersecurity tools, systems, and solutions.
• Follow SOC processes and assist ISD Security Engineers and OCIO support teams during alerts, events, and incidents.
• Submit new events and update existing events within the SOC ticketing system.
• Provide phone and email support to state agencies and participating partners during alerts, events, and incidents.
• Support Tier 1 SOC Analysts in triaging cybersecurity events, alerts, and incidents.
• Monitor EDR tools and perform initial assessment and data gathering for alerts.
• Assist with SOC metrics, reporting, and communications.
• Provide off-hours or ad-hoc shift support as required.
Soft Skills Include:
• Strong communication, reporting, and documentation abilities to interact effectively with diverse stakeholders.
• Proven ability to collaborate effectively with partners across varying technical backgrounds.
• Commitment to maintaining up-to-date knowledge on relevant cybersecurity technologies and evolving threat landscapes.
• A commitment to a culture that cares about team members and takes pride in providing innovative security solutions for the benefit of Iowans.
Education/Certifications:
• Bachelor’s degree in Cybersecurity, Computer Science, MIS, or a related field, and/or relevant professional certifications in combination with work experience.
Apply tot his job
Apply To this Job