Security Operations Center Analyst

<p><br /></p><p><strong>About the Company- Hybrid Role: Springfield Ma Area </strong></p><p><br /></p><p>As a Senior SOC Analyst, you will play a pivotal role in defending critical infrastructure.</p><p><br /></p><p><strong>About the Role</strong></p><p>As a Senior SOC Analyst, you will operate independently with minimal supervision to detect, analyze, and respond to complex security threats in a fast paced, mission critical SOC environment supporting electric grid operations, while leading response efforts for high severity and complex security incidents and serving as a project implementor for SOC‑related initiatives.</p><p><br /></p><p><strong>Responsibilities</strong></p><ul><li>Operate independently with minimal supervision to detect, analyze, and respond to complex security threats in a fast paced, mission critical SOC environment supporting electric grid operations.</li><li>Lead response efforts for high severity and complex security incidents, coordinating containment, eradication, and recovery across IT, OT, and engineering teams.</li><li>Apply threat modeling techniques to anticipate adversary attack paths, inform detection strategy, and improve defensive coverage across critical infrastructure systems.</li><li>Perform advanced threat detection and analysis using SIEM, EDR/XDR, network monitoring, and forensic tools.</li><li>Conduct malware analysis, digital forensics, and root cause investigations following security events affecting critical systems.</li><li>Develop, tune, and maintain detection rules, correlation logic, and automated response playbooks to continuously improve SOC effectiveness.</li><li>Coordinate tabletop exercises, purple team activities, and grid focused security assessments.</li><li>Mentor and train junior SOC analysts, providing guidance on investigation techniques, tools, and best practices.</li><li>Serve as the project implementor for SOC‑related initiatives, partnering with the PMO to plan, coordinate, and execute corporate security projects impacting SOC operations.</li></ul><p><br /></p><p><strong>Required Skills</strong></p><ul><li>SIEM platforms (Splunk, QRadar, ArcSight, Microsoft Sentinel, or similar)</li><li>EDR/XDR solutions (CrowdStrike, Carbon Black, Microsoft Defender, SentinelOne, or similar)</li><li>Network analysis tools (Wireshark, Zeek, tcpdump)</li><li>Forensic tools and techniques (EnCase, FTK, Volatility, Autopsy)</li><li>Attack frameworks such as MITRE ATT&amp;CK and the Cyber Kill Chain</li><li>Threat actor tactics, techniques, and procedures (TTPs)</li><li>Threat intelligence frameworks and indicators of compromise (IOCs)</li><li>Network protocols (TCP/IP, DNS, HTTP/S, SMTP, SMB)</li><li>Firewalls, IDS/IPS, and proxy technologies</li><li>Windows and Linux operating systems (administration and security hardening)</li><li>Cloud environments (AWS, Azure, GCP) and cloud security principles</li><li>Scripting languages (Python, PowerShell, Bash)</li><li>Malware analysis techniques (static and dynamic analysis)</li><li>Log analysis and event correlation</li><li>Vulnerability management concepts</li></ul><p><br /></p><p><strong>Preferred Skills</strong></p><ul><li>Relevant certifications such as GCIA, GCIH, GCFA, GREM, CISSP, CySA+, or equivalent</li><li>Experience in critical infrastructure or energy sector environments</li><li>Background in threat hunting or offensive security concepts</li><li>Familiarity with NERC CIP compliance requirements</li><li>Experience with SOAR platforms (Splunk SOAR, Palo Alto XSOAR, Swimlane)</li><li>Knowledge of OT/ICS security concepts</li></ul><p><br /></p>