DP
Security Analyst
DP Professionals
- 🇺🇸 United States
- Remote
- 10 hours ago
- Incident Response
- SIEM
- EDR
- Threat Intelligence
- Cortex
- Linux
- Active Directory
- CISSP
- CISA
- CEH
- OSCP
- GPEN
10 hours ago
Â
Work location:Fully remote
Duration:12 months
Terms: W2 contract
Candidate Location:No South Carolina residency required. Open to nationwide candidates; must be able to work eastern time zone hours. Preference will be given to candidates that are local to SC and are able to come onsite for project needs.
Â
Position summary:
- As a Tier-2 SOC Analyst for Information Security you will focus on supporting security monitoring, threat detection, security incident response and security investigations.
- Engaging directly with agencies to promote, support, and improve adoption of centralized security services is a key focus.Â
- All travel-related costs for onsite work will be the responsibility of the resource, regardless of the frequency of onsite work.
- Continuously review and correlate security event data across SIEM, EDR, IDS/IPS, and threat intelligence sources to identify complex attack patterns, emerging threats, and security incidents.
- Perform deep-dive analysis of suspicious activity, validate incidents, determine root cause and impact, and escalate critical incidents with detailed context to Tier 3 as required.
- Create detailed incident reports, timelines, and post-incident summaries; contribute to lessons-learned documentation and recommendations for remediation and preventative measures.
- Investigate user-reported phishing, malware infections, and potential policy violations; advise users and internal/external teams on containment and recovery actions.
- Recommend updates to SOC playbooks and workflows based on real-world investigations, fine-tune detection rules. Alert thresholds, and correlation logic to reduce false positives and improve threat coverage.
- Collaborate with engineering teams to ensure monitoring tools are properly configured and tuned. Integrate new threat intelligence feeds into workflows and proactively hunts for threats using up-to-date tactics, techniques, and procedures (TTPs).
- Serve as a customer-facing SME, “selling” the value of the division’s services by demonstrating capabilities and resolving issues.
- Document processes, runbooks, and troubleshooting steps related to SOC operations.
- Coordinate with engineering, SOC, and agency staff as needed to meet goals.
- Other duties as needed.
- 2+ years of experience with Security Monitoring and Incident Response.
- 2+ years of experience with MITRE ATT&CK framework.
- 2+ years of experience with dashboard creation and reporting.Â
- Associate’s degree in information technology or information security related field;
- Four years of relevant work experience may be substituted in lieu of education.
- 2 years of experience in supporting large soc operations.
- Experience with the Palo Alto Cortex XSIAM/XDR platform.
- Knowledge of Linux network administration and network design.
- Experience in administration of firewalls, VPN technology, Active Directory, Intrusion Detection/Prevention systems.
- Candidate is local to Columbia, SC or surrounding city in South Carolina.Â
- CISSP, CISA, CISO or equivalent advanced security certification.
- Additional relevant certifications (e.g., CEH, OSCP, GPEN).
- Vendor certifications related to information security.
Interested? Learn more:
Click the apply button to learn more about this position (#26-01336).
Â
DP Professionals (DPP) offers a range of compensation and benefits packages to our employees and their eligible dependents.DPP is a certified Woman-owned Small Business Enterprise (WBE and WOSB) with more than 25 years in the staffing industry.EOE/AA/V/D
Security Analyst · DP Professionals