SOC L3 Analyst

Job Description

Company Overview

Nuance is the pioneer and leader in conversational artificial intelligence (AI) innovations that bring intelligence to everyday work and life. We deliver solutions that understand, analyze, and respond to people, amplifying human intelligence to increase productivity and improve security. With decades of both domain and AI expertise, we work with thousands of organizations across a wide range of industries.

Join our team! At Nuance, we are constantly reinventing how people connect with technology and with each other. Our AI-powered solutions empower organizations to transform “business as usual.” For decades, the world’s leading financial, healthcare, telecommunications, retailers, and government organizations have trusted Nuance to bring them award-winning solutions that deliver more meaningful outcomes and empower a smarter, more connected world. From clinical speech recognition technologies that free physicians to spend more time caring for patients to real-time intelligence that powers billions of customer interactions, we’re deeply committed to helping organizations push the boundaries of what’s possible.

Job Summary

Summary:

The SOC L3 analyst prepares and manages incidents that are escalated, based on alerts and use cases. He/she support the team by helping triage and growing team skills. He/she ensures a high level of documentation with communication suitable to non-technical audience. On major incident, he/she acts as incident commander and single point of contact.

The SOC L3 analyst reports to the SOC manager. This role must display an in-depth understanding of new trends and technologies related to IT security and contribute to the company IT security strategy and roadmap.

Responsibilities:

• As an active member of the team, monitor and process response for security events on a 24x7 basis. Periodic On-call shift coverage will be required on a rotational basis.
• Plan and execute regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
• Stay current with and remain knowledgeable about new threats. Analyze attacker tactics, techniques and procedures (TTPs) from security events across a large heterogeneous network of security devices and end-user systems.
• Leverage automation and orchestration solutions to automate repetitive tasks.
• Aid in threat and vulnerability research across event data collected by systems.
• Investigate and document events to aid incident responders, managers and other SOC team members on security issues and the emergence of new threats.
• Work alongside other security team members to hunt for and identify security issues generated from the network, including third-party relationships.
• Seek opportunities to drive efficiencies, collaborate with other technology teams (e.g. NOC, Service Desk)
• Evaluate current SOC standards and procedures and update or author new content as required.
• Adhere to service level agreements (SLAs), metrics and business scorecard obligations for ticket handling of security incidents and events.
• Partner with the security engineering team to improve tool usage and workflow, as well as with the advanced threats and assessment team to mature monitoring and response capabilities.
• Leverage knowledge in multiple security disciplines, such as Windows, Unix, Linux, data loss prevention (DLP), endpoint controls, databases, wireless security and data networking, to offer global solutions for a complex heterogeneous environment.
• Maintain working knowledge of advanced threat detection as the industry evolves.
• Create and play scenarios/table-tops for team exercises
• Perform other duties as assigned.

A Typical Day:

• 60%, preparing or managing incidents
  • Analyzing security alerts and events logfiles, packet captures, system logs...
  • Reviewing incident process and playbook
  • Ensuring tools are available and operational
• 30%, projects
  • Standards, Procedures – Maturing the SOC
  • Internal training and mentoring – Maturing the SOC
  • Onboarding intake & acceptance process for environments/products into production
  • Threat Intelligence work – including authoring bulletins
  • New ideas

This job will require that..

• You can keep a clear head under pressure
• Are available to work on a shift and support emergency callouts
• Use good judgment when there are gaps in runbooks or procedures

Qualifications

Education: Master’s Degree or extra equivalent experience

Years of Experience: 6+

Required Skills:

• Experience working in a 24x7 operational environment, with world-wide presence preferred.
• Experience driving measurable improvement in monitoring and response capabilities at scale.
• Experience working with SIEM systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (IDS/IPS), file integrity monitoring (FIM), DLP and other network and system monitoring tools.
• Knowledge of a variety of Internet protocols.
• Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.
• Certifications can be considered a plus if applicable
• Required Skills: Incident Response, Security, SIEM, Curiosity, Critical thinking, Problem-solving, Writing
• Preferred Skills: Sumologic, Cisco, Symantec

A note on experience: We understand that experience and educations come in different forms. Many skills are transferable, and passion goes a long way. We want you to show us your dedication, impact and teamwork. We want you to learn new things too.

We encourage you to apply if your experience is close.

Additional Information

Nuance offers a compelling and rewarding work environment. We offer market competitive salaries, bonus, equity, benefits, meaningful growth and development opportunities and a casual yet technically challenging work environment. Join our dynamic, entrepreneurial team and become part of our continuing success.