Security Operations Center Analyst

For more details, please connect with Soumya Nayak at soumyan@vgroupinc.com or call at (919) 892-9711. End Client: State of Pennsylvania Designation : SOC Analyst 2 Duration: 5 months Location: 1 Technology Park | Harrisburg, PA 17110 (onsite) Hours Per Week: 40 Interview Type: In-person Ceipal ID: SPA_SOC748_SN Job Code: 807748 Department: OA-EISO-SOC Analyst 2 (807748) Scope of Project: The SOC Analyst 2 performs event triage and internal SOC escalations to protect the confidentiality, integrity, and availability of the Commonwealth’s information technology assets through prompt and accurate threat handling, while also identifying and closing security gaps through detection engineering, threat hunting, intelligence gathering, and investigation, thereby contributing to the continuous improvement of network and security monitoring. Responsibilities: Perform ongoing, on-site information security and network monitoring with proactive response for mission-critical communication sites and systems. Capture, log, and respond to events received from email, chat, telecommunication systems, and other security systems, ensuring accurate documentation of incoming data. Perform security investigation for alerts escalated within the Security Operation Center, determining full scope, potential root cause, and potential impact. Follow, create, and improve established playbooks and SOPs used by the SOC. Document security incidents, responses, and related information in accordance with established procedures. Analyze advanced logs, network capture, end-point telemetry to identify malicious activity and indicators of compromise (IOCs). Conduct initial threat hunting to proactively identify security anomalies and adversary activity. Conduct tuning and optimization of existing detection rules, alerts, and correlation logic to reduce false positives and improve detection fidelity. Participate in root cause analysis or lessons learned sessions. Monitor external event sources for security intelligence and actionable incidents. Provide incident response support as needed and directed during network and security events providing support for incident resolution. Maintain flexibility to work in various shift rotations to support 24/7/365 operations, including days, nights, holidays, and weekends. Performs other related duties as required. Required/Preferred Skills: Create queries, reports and scripts leveraging current security coding and SIEM query languages Prioritize tasks effectively. Working knowledge of troubleshooting tools (software) Analyze and interpret various information V Group Inc. is a NJ-based IT Services and Products Company with its business strategically categorized in various Business Units including Public Sector, Enterprise Solutions, Professional Services, Ecommerce, Projects, and Products. Within Public Sector business unit, we cater IT Professional Services to Federal, State and Local. We have multiple awards/ contracts with 30+ states, including but not limited to NY, CA, FL, GA, MD, MI, NC, OH, OR, CO, CT, TN, PA, TX, VA, NM, VT, and WA. If you are considering applying for a position with V Group, or in partnering with us on a position, please feel free to contact me for any questions you may have regarding our services and the advantages we can offer you as a consultant. Please share my contact information with others working in Information Technology. Website : https://www.vgroupinc.com/publicsector LinkedIn : https://www.linkedin.com/company/v-group/ Facebook : https://www.facebook.com/VGroupIT Twitter : https://www.twitter.com/vgroupinc