Careers

Description

Upstream is looking for a Senior Vehicle SOC (VSOC) analyst to join the Upstream V-SOC analysts team and focus on addressing potential vehicle security incidents, evaluate incidents identified by Tier 1 analysts, and create and implement, together with customers, a strategy for containment and recovery.

 

As a Senior VSOC analyst you will use threat intelligence, previous similar attack vectors, and insights from internal research teams to pinpoint affected assets, the type of attack, and the extent of the attack. 

 

The senior VSOC analyst will be responsible for playbook creation and maintenance and will ensure that the correct training is in place so that team members can implement procedures and policies. 

The senior VSOC analyst will act as the vehicle security focal point for managed services for customers and troubleshooting of real-time potential security alerts.

 

The position is full-time and is Michigan, USA based.

Responsibilities

• Primarily responsible for security event monitoring, management, and response.
• Provide administrative direction and support for daily operational activities.
• Participate in business reviews and workshops with partners and customers.
• Establish operational foundations, defining metrics and KPIs to drive governance, quality, and efficiency. Influence and improve existing processes through innovation and operational change.
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.
• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.
• Revise and develop processes to strengthen the current Security Operations Framework, review policies and highlight the challenges in managing SLAs.
• Identify threat vectors and develop use cases for security monitoring.
• Fine tune detection logic and machine learning profiles.
• Creation of root cause analysis, reports, dashboards, metrics for SOC operations and presentation to senior management.
• Fine-tune detection capabilities.
•  Document all activities during an incident and provide leadership with status updates during the life cycle of the incident..
•  Create a final incident report detailing the events of the incident.
• Working with the team to create RCA's for events escalated to incident levels.
• Development and execution of Standard Operating Procedures, Event Handlers and Job Aids required for successful task completion.
• Responsible for managing the incident E2E.

Requirements

•  Proficient in Incident Management and Response.
• Experience in creation of playbooks.
• Experience in security device management and SIEM (Splunk, Qradar, etc.)
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• Familiarity with malware techniques and attack techniques (e.g. code injection, DGA, hooks, etc.)
• Familiarity with big data platforms and data analysis (e.g. SQL, python)
• Strong troubleshooting and problem-solving skills.
• Knowledge of applications, databases, middleware to address security threats.
• Proficient in preparation of reports, dashboards, and documentation.
• Excellent communication and leadership skills.
• Ability to handle high pressure situations with key stakeholders.
• Excellent interpersonal skills, positive attitude and outstanding customer approach.
• Ability to take initiative and adapt.
•  Have excellent written and verbal communication skills.
•  Possess the ability to adjust and adapt to changing priorities in a dynamic environment.
•  Be able to multitask and be proactive in addressing issues and requests.
• Possess technical acumen and the ability to understand and interpret technical specifications.

 

Upstream is an equal opportunity employer. All candidates for employment will be considered without regard to race, color, religion, sex, national origin, physical or mental disability, veteran status, or any other basis protected by applicable federal, state or local law.