SOC Analyst Jobs in Houston, TX

INTRODUCTION

The Security Analyst III plays a critical role in providing robust experience, support, and technical expertise in the management of our security engineering tools, tuning of security alerts, and investigation, containment, forensics and resolution of security incidents. This role may also include additional 24/7/365 responsibilities – requiring on-call rotation in support of our Global Business and acting as a lead to the other members of the security operations center team.

ROLE AND RESPONSIBILITIES:

• Collaborates with various levels of ABS Management and users to ensure that system improvements and expansion projects are identified, prioritized, staffed, and scheduled to meet company needs and objectives.
• Evaluates and negotiates contracts for hardware, software, and services related to cybersecurity initiatives worldwide.
• Prepares and delivers both high-level and detailed presentations, as well as data flow, as-built, and other technical diagram documentation to support our technology teams and present to senior leadership as needed.
• Participates in development, ongoing testing, and stewardship of the Disaster Recovery Plan; oversees the implementation of the Disaster Recovery Plan from a cybersecurity standpoint in emergency situations.
• Manages multiple concurrent projects and ensures their completion within agreed-upon results and schedules.
• Provides technical and non-technical review advice to Director, Managers and staff, and to end-user management and the user community as necessary.
• Resolves differences in conflict situations.
• Keeps informed of cybersecurity news, threat intelligence, technology developments, and products via contacts with outside vendors, organizations, and periodicals; communicates IMS system requirements and directions to professional and technical industry associations and vendors.
• Prepares and delivers both high-level and detailed presentations on threat analysis, insider threats, security incidents, and forensics to ABS management and user groups.
• Reviews and ensures that both IMS Security and other technology organizations are in conformance with standards, policies, and procedures, and where not conformant, reports and drives resolution of nonconformity with owning parties.
• Implements cybersecurity changes through change control processes and procedures.
• Oversees the development of plans for cybersecurity system upgrades based on the projected growth of system utilization. Participates in the development of new cybersecurity systems to support the security operations center.
• Acts as an escalation point and mentor to fellow employees.
• Drives constant improvement to cybersecurity tools, processes, and vendors/technology partners, often leading the initiatives to make consistent improvements by leveraging industry best practices, KPIs, etc.

BASIC QUALIFICATIONS:

Education and Experience

• Requires a bachelor's degree in area of specialty.
• At least 8 years of experience in the field or in a related area.

Knowledge, Skills, and Abilities

• Capable of managing multiple priorities through the development of project plans and project management.
• Leadership of teams that support cybersecurity.
• Excellent oral and written communication and presentation skills.
• Data analysis and modeling.
• Threat analysis/forensics, threat hunting, and threat intelligence.
• Demonstrated ability to provide technical horsepower in development, deployment, support, and tuning of cybersecurity tools (Example: Splunk, Sentinel, Threat intelligence, alert dashboards, etc.).
• Works well with little supervision both independently and in a team environment.
• Able to obtain a working knowledge of the ABS Health, Safety, Quality, and Environmental Management System.

REPORTING RELATIONSHIPS:

The incumbent reports to a Manager, Director, or Executive level role. This position may at times act as a team lead or manager.