SOC Analyst Gates

Essential Duties and Responsibilities
The Cyber Security Command Center (CSCC) provides the most timely and comprehensive intelligence on external threats to the Security Operations Center (SOC) for detection, continuous monitoring of multiple security-related information sources, threat hunting, and, when needed, manage incident response related to cyber, privacy, and data protection for Gates data, infrastructure, and networks.

The CSCC team will take disparate data sets and combine it with threat information and other enrichment to conduct analysis and identify incidents and drive appropriate responses to contain and minimize impact the threats and restore normal operations.

Key responsibilities:

Actively monitor security threats and risks, provide in-depth incident analysis, evaluate security incidents, will provide proactive threat research, and recommend mitigation strategies.
Utilize the latest in security technology and be at the forefront of incident response to support operations at Gates locations around the world.
Act as a core member of the Incident Response Team, triaging, responding to and reporting incidents and providing cyber security metrics.
Evaluating and determining if/when information security violations have occurred through examination of network or device logs, open-source research, vulnerability and configuration scan data, and user provided reports.
Demonstrate a strong understanding of information security policies and doctrine, ability to draft, modify and create SOPs for use of other team members.
Keys to Success
Requires in-depth knowledge and experience
Requires conceptual and practical expertise in own area and general knowledge of related areas
Has knowledge of best practices and how own area integrates with others; is aware of the competition and the factors that differentiate the company in the market
Supervisory Responsibilities
Acts as a resource for other team members; may lead projects with limited risks and resource requirements
Acts as a resource for colleagues with less experience
Requirements and Preferred Skills
5-7 years of experience
Degree in Computer Science, Cybersecurity, IT, or equivalent experience (min. 4 years).
2-4 years in a cybersecurity or SOC environment.
Strong understanding of OSI model, incident response, and threat analysis.
Proficient in SIEM tools (e.g., Splunk), IAM, server/network security, and vulnerability management.
Familiarity with ISO 27001, NIST CSF, and general security frameworks.
Effective communicator across all organizational levels; strong multitasking and organization skills.
Experience with Linux systems; cloud knowledge is a plus