Job Position: SOC (Security Operations Center) Senior Threat Analyst 1 (Nights / Weekends)

Pay Rate: $45 to $50 per hour

Location: Onsite at 11 MetroTech Center, 5th Floor (SOC), Brooklyn, NY 11201

Schedule:

1. 35 hours per week
2. Monday to Friday, 6:00 PM to 6:00 AM
3. Includes weekend shifts

Duties:

1. Perform critical functions within the Threat Management discipline, providing 24x7x365 coverage at the City’s Security Operations Center (SOC), including days, nights, weekends, and holidays.
2. Interface with OTI Cyber Command teams internally, as well as City agencies, vendors, and information-sharing partners.
3. Monitor City networks and security alerts for intrusions, attempted compromises, and anomalous behavior.
4. Apply mitigation techniques or escalation factors and correlate threat intelligence across various logs collected by established security controls.
5. Produce routine SOC metrics and reporting.
6. Maintain situation reports (SITREPS).
7. Perform weekly quality control checks.
8. Work closely with the SOC Director on incident preparation, including the continuous development of new SOC playbooks and runbooks.

Mandatory Skills/Experience:

1. Minimum of 8 years of experience in Threat Management, SOC, or Incident Response environments.
2. Leadership experience, including the ability to lead and mentor junior analysts, coordinate team activities, and manage SOC operations effectively.
3. Prior experience working in a SOC environment, with familiarity in SOC operations, procedures, and tools such as SIEM (Security Information and Event Management) systems, intrusion detection/prevention systems (IDS/IPS), and endpoint detection and response (EDR) tools.

Desirable Skills/Experience:

1. Knowledge of cybersecurity principles, practices, and procedures.
2. Strong understanding of network and host technologies.
3. Experience applying techniques for detecting host and network-based intrusions using IDS methods and technologies.
4. Experience with SIEM technologies, malware analysis, and mitigation techniques.
5. Ability to apply cybersecurity and privacy principles to organizational requirements (confidentiality, integrity, availability, authentication, non-repudiation).
6. Ability to interpret information collected by diagnostic network tools (Netflow, security event logs, IDS systems, etc.).
7. Ability to investigate and solve complex problems.