Principal SOC Analyst – Incident Response

About the Role

The day-to-day responsibilities of this role will be fast-paced and dynamic, with a focus on identifying, analyzing, and mitigating potential security threats. The Principal SOC Analyst will need to stay ahead of the curve, constantly updating their knowledge of the latest cyber threats and technologies to ensure the company remains protected. This will involve working closely with other teams, including IT, compliance, and risk management, to ensure a holistic approach to cybersecurity.

The ideal candidate will have a strong technical background in cybersecurity, with experience in incident response, threat analysis, and security operations. They will also possess excellent communication skills, with the ability to distill complex technical information into clear, actionable insights for non-technical stakeholders. The Principal SOC Analyst will report to the Head of Cybersecurity and will be responsible for leading and mentoring junior team members.

What You Will Do

• Develop and maintain Incident and Event Response Plans for various types of situations, ensuring the company is always prepared to respond to potential security threats.
• Identify and coordinate training to stay ahead of the ever-changing cyber landscape, ensuring the team has the skills and knowledge needed to respond effectively to emerging threats.
• Lead, document, and brief responses to traditional cyber alerts and asymmetric security events, providing clear and timely communication to stakeholders.
• Provide assessments and recommendations for improvements to security posture, identifying areas for enhancement and developing strategies to address them.
• Organize and lead global response to atypical security events, ensuring a coordinated and effective response to potential threats.
• Collaborate with cross-functional teams, including IT, compliance, and risk management, to ensure a holistic approach to cybersecurity.
• Develop and maintain relationships with key stakeholders, including leadership, IT, and external partners, to ensure effective communication and collaboration.
• Stay up-to-date with the latest cybersecurity trends and technologies, attending conferences, workshops, and training sessions to maintain expertise.
• Participate in the development of cybersecurity policies and procedures, ensuring they are effective and aligned with industry best practices.

What We Are Looking For

• Strong technical background in cybersecurity, with experience in incident response, threat analysis, and security operations.
• Excellent communication skills, with the ability to distill complex technical information into clear, actionable insights for non-technical stakeholders.
• Experience with security information and event management (SIEM) systems, incident response platforms, and other cybersecurity tools.
• Knowledge of compliance regulations and industry standards, including PCI-DSS, HIPAA, and ISO 27001.
• Experience with cloud-based security solutions, including AWS, Azure, and Google Cloud.
• Strong leadership and mentoring skills, with the ability to lead and motivate junior team members.
• Experience with project management methodologies, including Agile and Waterfall.
• Strong analytical and problem-solving skills, with the ability to analyze complex data sets and identify trends and patterns.

Nice to Have

• Experience with machine learning and artificial intelligence-based security solutions.
• Knowledge of programming languages, including Python, Java, and C++.
• Experience with data analytics and visualization tools, including Tableau and Power BI.
• Certification in cybersecurity, such as CISSP, CISM, or CEH.
• Experience with IT service management frameworks, including ITIL.

Benefits and Perks

• Competitive salary and benefits package.
• Opportunities for career growth and professional development, including training and certification programs.
• Flexible working hours and remote work options.
• Access to the latest cybersecurity tools and technologies.
• Collaborative and dynamic work environment.
• Recognition and reward programs for outstanding performance.
• Comprehensive health and wellness programs, including mental health support and employee assistance programs.
• Paid time off and holidays, including a generous vacation package.
• Retirement savings plan and matching program.
• Employee stock purchase plan and equity options.

• Develop a strong understanding of cybersecurity principles and practices, including threat analysis, incident response, and security operations.
• Stay up-to-date with the latest cybersecurity trends and technologies, attending conferences, workshops, and training sessions to maintain expertise.
• Build a strong portfolio of your work, including case studies and examples of your experience in incident response and cybersecurity.
• Practice your communication skills, including the ability to distill complex technical information into clear, actionable insights for non-technical stakeholders.
• Be prepared to discuss your experience with security information and event management (SIEM) systems, incident response platforms, and other cybersecurity tools.
• Research the company and the role, including the company's approach to cybersecurity and the challenges they face in this area.
• Prepare examples of your leadership and mentoring experience, including times when you have led and motivated junior team members.
• Be ready to discuss your experience with project management methodologies, including Agile and Waterfall, and how you have applied these in previous roles.