Senior SOC Analyst

- Provide expert technical support in Incident Response (IR), Network Defense, and the creation of SIEM content. - Serve as an authority in cyber threats and information security, particularly in the areas of TTPs, Threat Actors, Campaigns, and Observables. - Demonstrate expertise in incident response, insider threats, forensics, and cyber threats. - Utilize Splunk as a Security Information and Event Monitoring (SIEM) platform and for log management. - Create custom content, including rules, filters, signatures, countermeasures, and scripts, to enhance analysis and detection efforts, with strong knowledge of SPL. - Collect data, report findings, and manage security incidents or urgent situations effectively. - Maintain incident response capabilities to secure protected datas confidentiality, integrity, and availability. - Manage and extract insights from complex large data sets. - Exhibit excellent documentation and written skills, particularly in technical report writing. - Provide ad-hoc training to junior, mid, or senior members of the cyber workforce. - Display Subject Matter Expertise (SME) in Advanced Persistent Threat (APT) or emerging threats. - Utilize various packet capture (PCAP) tools and analyze PCAP and NetFlow data. - Conduct static and dynamic malware analysis, including reverse engineering of binaries. - Have familiarity with coding and scripting languages (BASH, PowerShell, Python, etc.) or software development frameworks such as .NET.