Senior SOC Analyst

Job Summary: The SOC Engineer is part of the Cyber team and serves as an escalation responder to security events within the Security Operations Center. The ideal candidate would have a strong problem-solving skills and analytics aptitude. This role participates in security posture monitoring and threat response activities and is directly responsible for troubleshooting security events. This role provides additional analysis during security incidents establishing the extent of the threat, business impacts, and then advising and performing the most suitable course of action to contain and remedy the incident. The SOC Engineer must maintain a good knowledge of the threat landscape, help enhance current capabilities, and provides support in the identification of new methods of detecting threats. Job Duties: Monitors security event platforms and follow incident playbook for first response, triage, potential resolution, and participates in postmortem activities as requiredConducts network monitoring and intrusion detection analysis using various network defense tools, such as intrusion detection/prevention systems (IDS/IPS), firewalls, host-based security systems (HBSS), Azure security, and audit log management etc.Provides proactive feedback to enable improvement of the current monitoring rules, based on information and knowledge/experienceCreates daily, weekly, and monthly reports for Security Management TeamPerforms front line response and escalation tasks and updates runbooks and procedures as neededCompiles statistics and contributes to the improvement and creation of playbooksUses public cyber security resources (e.g. sites/blogs/podcasts) to stay up to date with latest news, threats, and security analysis toolsParticipates in on-call rotationOther duties as requiredQualifications, Knowledge, Skills and Abilities: Education High School Diploma or GED, requiredBachelor's Degree in Information Technology, Cybersecurity, or Computer Science, preferredExperience Three (3) or more years of experience in infosec, cybersecurity, system or networking, requiredThree (3) or more years of experience of network protocols, configurations, or IT operations, requiredTwo (2) or more years of experience within cloud technologies such as Azure, Azure Stack Azure Backups, AWS or similar cloud experience, preferredTwo (2) or more years with EDR platform or SIEM Platform, preferredExperience with help desk ticketing systems and service desk management tools, preferredLicense(s)/Certification(s) Microsoft SC-900, 200, 300 preferredAny IT security certifications, preferredSoftware Experience with four (4) or more of the following, required:Microsoft SentinelInformation Security tools & packet analyses tools (e.g. CB, Wireshark)Intrusion Detection (e.g. IDS/IPS tools)Firewall troubleshootingStrong Windows and LinuxInternet Protocols and Services (e.g. TCP/IP, FTP, HTTPS, SSH)Log analysis/ Windows event analysisNetwork and Host basic forensicsEDR solutionsTroubleshooting and root cause analysesOther Knowledge, Skills, & Abilities Strong verbal and written communication skillsExcellent interpersonal and customer relationship skillsAbility to work in a deadline-driven environment while handling multiple projects/tasks simultaneously with a focus on detailsAbility to react quickly, decisively and deliberately in high-stress, high-impact situationsAbility to multi-task while working independently or within a group environmentAbility to work well under pressure while dealing with unexpected problems in a professional mannerAbility to discuss technology and effectively communicate technical issues with all audiences.Must possess good work habits, a strong work ethic, and be able to adhere to company work hours, policies, and standard business etiquetteKEYWORDS: SOC, Networking, Security, Intrusion Detection, Windows, Linux, Internet Protocol, Network Infrastructure, Host and Network Based Forensics, Antivirus Solutions, Troubleshooting, EDR Platform, SIEM Platform, Cyber Security, Cyber, Security Operations Center. Individual salaries that are offered to a candidate are determined after consideration of numerous factors including but not limited to the candidate's qualifications, experience, skills, and geography. Illinois Range: $60,000 - $95,000 At BDO, how we show up matters. We build strong relationships by supporting one another, our clients, and our communities with care, curiosity, and a commitment to helping one another grow and succeed. Here, you'll find meaningful work, leaders invested in your success, and opportunities to build a career around what matters most to you. Our purpose is to be the people our clients count on to grow with confidence and achieve what matters most. Our values guide how we bring that purpose to life each day. Together, they shape how we work with one another, serve our clients, and create meaningful impact. BDO provides assurance, tax, and advisory services to clients across the U.S. and around the world. No matter your role, you'll be part of a team helping clients navigate complexity and move forward with clarity. We are proud to be an ESOP company, offering participants a stake in the firm's success through beneficial ownership and a unique opportunity to enhance their financial well-being. As a qualified retirement plan, the ESOP is a meaningful addition to our comprehensive compensation and Total Rewards benefits* offerings. It also reinforces an ownership mindset that strengthens our connection to one another, our clients, and the future we're building together. Learn more about our benefits: BDO Total Rewards encompass more than traditional benefits. Click here to find out more! Benefits may be subject to eligibility requirements.Equal Opportunity Employer, including disability/vets Click here to find out more! Skills: Amazon Web Services (AWS), Analysis Skills, Antivirus, Auditing, Blog, Cloud Computing, Communication Skills, Computer Network Defense (CND), Computer Science, Computer Security, Customer Relations, Customer Support/Service, FTP (File Transfer Protocol), Firewalls, Forensic Science, Geography, HTTPS (HyperText Transport Protocol Secure), Help Desk, High School Diploma, IP (Internet Protocol), Identify Issues, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Protocols, Internet Security, Internet/Online Service, Interpersonal Skills, Intrusion Detection Systems, Intrusion Detection and Prevention (IDP), Intrusion Prevention Systems, Linux Operating System, Microsoft Product Family, Microsoft Windows Azure, Microsoft Windows Operating System, Multitasking, Network Administration/Management, Network Configuration Management, Network Monitoring, Network Protocols, Network Security, On Call, Podcasting, Presentation/Verbal Skills, Problem Solving Skills, Root Cause Analysis, SSH (Secure Shell), Security Analysis, Security Attacks, Security Auditing, Security Information and Event Management (SIEM), Security Infrastructure, Security Monitoring, Statistics, TCP/IP (Transmission Control Protocol/Internet Protocol), Time Management, Wireshark (Ethereal), Writing Skills BDO International Ltd