Cyber Security Analyst – SOC Assurance & Response Team

RKON is an ISO 27001 and AICPA SOC 2 Type II certified company that specializes in providing IT migration and transformation services for the mergers and acquisition market. The company fosters an environment encouraging initiative, creative thinking, and collaboration. RKON operates as a distributed, globally-minded team.

• Proven experience working in a client-facing Security Operations Center (SOC) on Assurance and Response Team.
• Motivated fast learner with security industry knowledge of current and emerging vulnerabilities and threats.
• Ability to perform identification of assets, vulnerability scanning, penetration testing, and security monitoring.
• Experience investigating and analyzing security events to mitigate internal and external threats.
• Capability to collaborate with clients and stakeholders for detection, triage, incident analysis, containment, remediation, and reporting.
• Knowledge of security event management functions and risk prioritization.

• Assist in establishing a mature and optimized Security Operations Center to support managed security services.
• Identify and remediate infrastructure and application vulnerabilities from scanning and penetration testing.
• Analyze and respond to security threats from various sources including Firewall, IDS, IPS, Antivirus, Endpoint Detection and Response (EDR), Network Detection and Response (NDR), Email Security, and Cloud Security.
• Respond to clients promptly with clear analysis and recommended actions, supporting asynchronous collaboration.
• Document actions in cases for effective communication and historical retrieval.
• Adhere to company and client policies and security practices.
• Independently resolve problems and understand escalation procedures.
• Conduct scanning and monitoring activities to identify vulnerabilities and threats.
• Participate in security incidents as the technical Subject Matter Expert.
• Utilize analytics to identify potential vulnerabilities and threats.
• Detect, respond, mitigate, and report cyber threats and incidents.
• Collaborate with technical leads and Subject Matter Experts across global teams.
• Serve as liaison to key security vendor solution partners.
• Operate cyber security incident response technologies including network logging, forensics, SIEM tools, security analytics, and log search technologies.
• Act as internal information security consultant for SOC Assurance and Response.
• Assist in development and knowledge sharing within the team.
• Assist in security console tuning.
• Perform threat hunts targeting known vulnerabilities and attack vectors.