L3 SOC Analyst - Splunk and Linux

As an L3 SOC Analyst at CyberProof, a UST Company, you will play a crucial role in monitoring, investigating, and resolving security incidents, violations, and suspicious activities. Your primary responsibilities will include: - Acting as an escalation point for high and critical severity security incidents and conducting thorough investigations to determine potential impact and understand the extent of compromise. - Analyzing attack patterns, Tools, Techniques and Procedures (TTPs) to identify methods of attacks and attack life cycle. - Providing recommendations on issue resolution activities such as security controls policy configuration changes and security hygiene improvement. - Hunting for Indicators of Compromise (IOCs) and signs of Advanced Persistent Threats (APTs) within the Clients environment. - Conducting threat hunting through in-depth log analysis to identify potential threats that may have evaded automated detection. - Identifying gaps and weaknesses in existing security processes and proposing enhancements to improve established incident response methodologies. - Collaborating with cross-functional teams to ensure end-to-end management of security incident lifecycle. - Documenting and updating incident response processes, defining outcomes for future references, and driving continuous improvement. - Participating in regular team meetings, Incident Response war room discussions, and executive briefing sessions. Requirements: - Minimum 2+ years of experience as a SOC L3 Analyst working as part of a Global SOC team. - Resolving, escalating, reporting, and raising recommendations for resolving and remediating security incidents. - Proactively monitoring and reviewing threats and suspicious events from customers participating in the service. - Handling the advanced monitoring of system logs, SIEM tools, and network traffic for unusual or suspicious activity. - Investigating and resolving security violations by providing post-mortem analysis to illuminate issues and possible solutions. - Collating security incident and event data to produce monthly exception and management reports. - Reporting unresolved network security exposure, misuse of resources, or noncompliance situations using defined escalation processes. - Assisting and training team members in the use of security tools, the preparation of security reports, and the resolution of security issues. - Developing and maintaining documentation for security systems and procedures. - Experience in handling Linux servers, familiar with Linux OS and commands. - Maintaining excellent customer satisfaction through professional, proactive, and personal service. - Experience with SIEM vendors such as QRadar, ArcSight, RSA, and LogRhythm. - Experience in incident response and in writing procedures runbooks and playbooks. - Ability to work with customers IT and security teams. CyberProof, a UST Company, is dedicated to transforming the operations of customers and securing the security landscape by utilizing innovative approaches and cutting-edge technologies. UST is a global digital transformation solutions provider that partners with clients from design to operation to make a real impact through transformation. With over 30,000 employees in 30 countries, UST builds for boundless impact, touching billions of lives in the process.,