What are the responsibilities and job description for the SOC Analyst II position at Hurricane Labs?
Job Opening: SOC Tier II
About Hurricane Labs
Hurricane Labs is a dynamic Managed Services Provider that unlocks the potential of Splunk and security for diverse enterprises across the United States. With a dedicated, Splunk-focused team and an emphasis on humanity and collaboration, we provide the skills, resources, and results to help make our customers’ lives easier.
Our cooperative geek culture empowers the success of our team. We encourage an open environment where diverse, passionate people feel comfortable sharing ideas, learning through experience, and succeeding together.
For more information, visit www.hurricanelabs.com and follow us on Twitter @hurricanelabs.
SOC Tier II Responsibilities & Qualifications
We are currently seeking an SOC Tier II to join our team. The chosen candidate for this position must have a love of diverse technologies and IT-related infrastructure.
Desired Technical Skills
- Ability to take escalations from Tier I and handle deeper investigations
- Must be comfortable with a variety of tools and techniques for investigatory methods
- Have an understanding and ability to use a SIEM–Splunk Enterprise Security is our preferred SIEM tool–for event investigation
- Interest and ability to keep up on the latest security news and events, and effectively communicate them to team members
- Have an in-depth understanding of Windows Event Logs is a huge plus
- Have a knowledge of MITRE and other attack classifications–these will be a big part of this position
- Ability to perform malware reversal is not part of this role but can be helpful to understand the theory behind it
- Linux skills are a plus
Necessary Soft Skills
- Ability to read and understand written English
- Ability to clearly communicate on the phone and through e-mail/ticket updates
- Ability to manage multiple tasks simultaneously and prioritize tasks appropriately
- Good customer service skills. Note: this job requires you to speak to clients throughout the day, please remember when applying
Technologies
Splunk Enterprise Security is our preferred SIEM tool, and is used for event investigation. The other technologies we use include Splunk, Suricata, Git, and logs/events from various sources.
Benefits & Perks
We believe in taking care of our team. Hurricane Labs provides our employees with a full benefits package, including 100% company paid medical, dental, and vision insurance, as well as long/short-term disability coverage.
Being part of the Hurricane Labs team also means enjoying a bunch of perks like:
- Open source project support
- On-the-job training/learning opportunities
- No micromanagement
- Flexible work schedule
- Paid holidays
- PTO
- 401K
Feel like you would be a good fit? Tell us why!
Please submit your cover letter and resume. We also encourage our applicants to include their blog, GitHub, and/or related projects to provide an example of your applicable skills–nice, but not required.
We appreciate you taking the time to apply with Hurricane Labs!