Job Description
We are looking for professionals with a high level of experience protecting critical infrastructure to help us defend cloud infrastructure. Our team is skilled in threat hunting, analyzing indicators of compromise (IOCs), investigating adverse security events, security incident management, and digital forensics across IaaS, PaaS, and SaaS environments. You will be part of a corporate security operations center responsible for defending infrastructure from adversaries and insider threats. This includes using tools to analyze and respond to threats, creating tools/scripts to aid in analysis, and responding in real time to adverse security events. Our team is the last line of defense if security controls are breached. We are expanding the team and working on ambitious new initiatives.
The Tier 2/3 SOC Analyst will leverage advanced security tooling and automation to rapidly detect and respond to real-time security alerts and events and conduct detailed root cause investigations. The analyst will work closely with Tier 1, forensics, incident response, and engineering partners to mitigate a wide variety of threats and malicious activity.
Career Level - IC4
Responsibilities
Key Responsibilities
1. Support shifts and on-call rotations
2. Detect and respond to security events and threats from alerting, escalations, and other sources
3. Lead complex investigations and conduct deep analysis of security events focused on rapid containment, remediation, and mitigation
4. Work closely with security engineering teams to improve monitoring, detection, and tooling
5. Understand the threat landscape, emerging trends, and incorporate this understanding into day-to-day security monitoring
6. Operate SOC technologies, including but not limited to a Security Information Event Management (SIEM) platform, Intrusion Detection Systems (IDS), SOAR, Firewalls, Anti-Malware solutions, and insider threat tooling
7. Assist with security incident response activities
8. Prepare assigned reports for the SOC shift Lead
9. Provide high-quality written and verbal reports as required
10. Actively monitor and respond to the SIEM alert queue and triage alerts
11. Investigate alerts using standard operating procedures
12. Monitor several screens, systems, and alerts simultaneously
13. Provide direction and mentoring to the other SOC levels
14. Must be an Irish Citizen. The role is a remote position that may require shift work including nights and weekends.
Preferred Qualifications
1. Five plus years of Incident Response, Security Operations Center, and/or Forensic Analyst experience
2. Comfortable working in an ambiguous, fast-paced, unpredictable environment
3. Experience working in a highly collaborative, team-centric, event-driven operations team
4. Experience with querying across large data sets to understand complicated and difficult to solve problems
5. Strong attention to detail
6. Experience in one or more of the following fields of work: National security, military, federal intelligence, law enforcement, criminology, and/or foreign areas and language
7. Experience with a variety of operating systems and threats that target them including Windows, UNIX/LINUX, and MacOS
8. Experience performing open-source research on a variety of topics
9. Excellent verbal/non-verbal communication skills with proficient ability to deliver technical information to non-technical staff
About Us
As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's problems. True innovation starts with diverse perspectives and various abilities and backgrounds.
When everyone's voice is heard, we're inspired to go beyond what's been done before. It's why we're committed to expanding our inclusive workforce that promotes diverse insights and perspectives.
We've partnered with industry-leaders in almost every sector and continue to thrive after 40+ years of change by operating with integrity.
Oracle careers open the door to global opportunities where work-life balance flourishes. We offer a highly competitive suite of employee benefits designed on the principles of parity and consistency. We put our people first with flexible medical, life insurance, and retirement options. We also encourage employees to give back to their communities through our volunteer programs.
We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by calling +1 888 404 2494, option one.
Disclaimer:
Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.
* Which includes being a United States Affirmative Action Employer
#J-18808-Ljbffr