全职 SOC Analyst 工作, 薪水, UST 公司招聘中 - Ricebowl

Role Description

Job Summary

We are seeking a detail-oriented and proactive SOC Analyst to join our cybersecurity operations team. The successful candidate will be responsible for monitoring, triaging, and investigating security incidents, while collaborating closely with internal teams and client stakeholders to ensure timely and effective response to threats.

Required Technical Skills & Competencies & Tools

• Experience working in a Security Operations Center (SOC) or similar environment.
• Familiarity with incident response frameworks and security best practices.
• Understanding of common cyber threats, attack vectors, and detection methodologies.
• Experience with the following tools and platforms is highly desirable:
• Palo Alto XSOAR – Centralized platform for managing and handling security incidents and workflows.
• Palo Alto XDR – Conduct endpoint investigations and perform search queries to validate potential compromises.
• Proofpoint – Analyze and triage email-related security incidents; ability to quickly locate relevant threat data.
• Microsoft Security Tools – Gather contextual information (e.g., user activity, connection status) to support investigations.
• ServiceNow (SNOW) – Manage incidents and user requests; leverage historical approvals and records to identify false positives and streamline resolution.
• Strong triaging and incident analysis skills.
• Excellent communication and collaboration abilities.
• Solid analytical and critical thinking capabilities.
• Ability to follow structured processes while adapting to dynamic scenarios.
• Attention to detail and strong documentation skills.
  
  

Key Responsibilities

• Perform incident triage and analysis to assess the severity and impact of security s.
• Investigate potential security incidents and determine whether they are true positives or false positives.
• Monitor and manage security s through centralized platforms and follow established incident response playbooks.
• Apply analytical thinking to handle non-standard or complex cases where predefined procedures may not fully apply.
• Collaborate with customer-side operational teams and internal stakeholders to resolve incidents efficiently.
• Escalate critical issues and proactively raise concerns when necessary.
• Document findings, actions taken, and outcomes in ticketing systems.
• Handle user requests and incident records in accordance with organizational processes.
  
  

Skills

SOC, SIEM,Palo Alto XSOAR, Palo Alto XDR, Proofpoint, Microsoft Security Tools , ServiceNow, SNOW, Compliance management, Incident response, Network security,