SOC Security Analyst
Kforce Inc.

Job Info

---

RESPONSIBILITIES:

Kforce has a client that is seeking an SOC Security Analyst in New York, NY.Overview:We are seeking a skilled SOC Security Analyst with specialized expertise in Microsoft server support, Tanium security, and SIEM (Security Information and Event Management) technologies. In this role, you will be responsible for leveraging your in-depth knowledge of Microsoft server environments, Tanium endpoint security solutions, and SIEM platforms to enhance our organization's cyber defense capabilities and mitigate security risks effectively. Microsoft Server Support:

• Provide expert-level support for Microsoft Windows Server environments, including installation, configuration, and maintenance of server operating systems and applications
• Perform regular security hardening and patch management activities to ensure the integrity and resilience of server infrastructure
• Collaborate with IT teams to troubleshoot server-related issues and implement security best practices to protect against vulnerabilities and exploits

Tanium Security Operations:

• Utilize Tanium endpoint security solutions to monitor, manage, and secure endpoints across the organization's network
• Configure and deploy Tanium agents to endpoints, ensuring comprehensive visibility and control over endpoint security posture
• Develop custom Tanium queries and scripts to identify security threats, vulnerabilities, and compliance gaps in real-time

SIEM Management and Analysis:

• Manage and maintain SIEM platforms, such as Splunk, logscale, falcon NGSEIM, to collect, correlate, and analyze security event data from disparate sources
• Develop and tune SIEM rules, alerts, and correlation logic to improve detection accuracy and reduce false positives
• Conduct thorough analysis of SIEM alerts and logs to identify potential security incidents, anomalies, and indicators of compromise (IOCs)

REQUIREMENTS:

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent mature experience)
• Relevant certifications such as MCSE (Microsoft Certified Solutions Expert), Tanium Certified Administrator, and SIEM vendor certifications are highly desirable
• Extensive experience in Microsoft server administration and support, including Active Directory, Group Policy, and Windows Server roles and features
• Proficiency in deploying, configuring, and managing Tanium endpoint security solutions
• Strong understanding of SIEM concepts, architecture, and implementation, with experience working with SIEM platforms
• Excellent analytical, problem-solving, and communication skills
• Ability to work independently and collaboratively in a fast-paced SOC environment

Benefits:

• Competitive salary and benefits package
• Opportunities for professional development and training
• Work with cutting-edge technologies in cybersecurity
• Contribute to enhancing the organization's security posture and resilience

---