5+ years of experience in a SOC environment focusing on incident handling and digital forensics
Proficiency with SIEM platforms like Splunk
Strong understanding of network protocols (TCP/IP, DNS, HTTP)
Familiarity with malware analysis and reverse engineering techniques
Exceptional problem-solving abilities and attention to detail
Strong communication skills for conveying technical findings to diverse audiences
Responsibilities
Lead investigations of complex security incidents and coordinate remediation efforts
Proactively search for undetected malicious activity using advanced analytical techniques
Manage and fine-tune SIEM tools, IDS/IPS, and EDR solutions
Integrate threat intelligence feeds to update defensive postures
Provide technical guidance and mentorship to SOC analysts
Develop and refine SOPs, incident response playbooks, and SOC runbooks
Assist in identifying security gaps and coordinate timely patching with infrastructure teams
Benefits
75% to 90% of medical, dental, and vision premiums covered
401K with automatic 6% contribution from PFFCU after 1 year
Comprehensive health benefits
Opportunities for professional development and mentorship
Full Job Description
Competitive Base Salary - Experience Required
****EXCELLENT MEDICAL, DENTAL, VISION BENEFITS: 75% to 90% of premiums covered by PFFCU*****
****401K - PFFCU contributes automatic 6% regardless of employee contribution after 1 year*****
Location: 3325 Street Road, Bensalem, PA 19020
Role Overview
The Senior IT Security Analyst is responsible for overseeing the detection, investigation, and mitigation of advanced cybersecurity threats. This role involves high-level incident response, threat hunting, and the continuous improvement of security monitoring tools and processes to protect the organization's digital assets.
Key Responsibilities • Incident Response: Lead the investigation of complex security incidents; perform deep-dive forensics and coordinate remediation efforts to minimize impact. • Threat Hunting: Proactively search for undetected malicious activity within the network using advanced analytical techniques and threat intelligence. • Monitoring & Detection: Manage and fine-tune Security Information and Event Management (SIEM) tools, Intrusion Detection/Prevention Systems (IDS/IPS), and Endpoint Detection and Response (EDR) solutions. • Threat Intelligence: Integrate and utilize threat intelligence feeds to stay ahead of emerging attack vectors and proactively update defensive postures. • Mentorship: Provide technical guidance and mentorship to SOC analysts to enhance the overall capability of the team. • Process Improvement: Develop, document, and refine Standard Operating Procedures (SOPs), incident response playbooks and SOC runbook. • Vulnerability Management: Assist in identifying security gaps and coordinating with infrastructure teams to facilitate timely patching and mitigation.
Required Qualifications • Experience: Extensive experience in a SOC environment (typically 5+ years) with a focus on incident handling and digital forensics. • Technical Skills:
o Proficiency with SIEM platforms (e.g., Splunk).
o Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.) and traffic analysis.
o Familiarity with malware analysis and reverse engineering techniques. • Analytical Skills: Exceptional problem-solving abilities and a high attention to detail. • Communication: Ability to communicate technical findings clearly to both technical teams and non-technical stakeholders.
