SOC L3 Analyst

MGT is a leading provider of technology and advisory solutions serving state, local, and education government agencies (SLED) across the United States. Through client partnerships, MGTs almost 1,200 employees impact communities for good by managing and securing critical networks, solving complex human capital and fiscal problems, elevating education systems, and advancing equity as a performance imperative. MGT partners with thousands of agencies as a trusted advisor delivering solutions that improve technology, operational, and economic performance to help communities thrive.

Role & responsibilities :

• Responsible for monitoring, detecting and alerting on potential security threats and vulnerabilities to the company's telecommunications and signal processing hardware, software and electrical systems.
• Actively and consistently support all efforts to simplify and enhance the customer experience.
• Designs and implements processes and controls that acquire and correlate security relevant system and application log data to alert and report on potential security events.
• Actively searches all areas of the internal network for hidden threats and vulnerabilities.
• Serves as highest level of escalation for security incident response.
• Performs digital forensics on compromised systems.
• Mentors junior-level staff on proper security incident response and threat validity.
• Implements, maintains and monitors threat intelligence data from various resources that is relevant to Charter's networks and systems.
• Develops and coordinates the implementation of security counter-measures with the appropriate organizations.
• Designs and implements the system logic to detect security threats.
• Recommends, designs and implements security systems and tools used by Network Security
• Operations and provides ongoing system support.
• Adheres to industry specific local, state, and federal regulations, as applicable.
• Performs other duties as requested by manager.

Preferred candidate profile :

• Current security certifications, such as CISSP, GCIH, GCFE, GCFA, GCTI, CHFI.
• Experience in enterprise operations
• Experience in digital forensics and incident response
• Security Information and Event Management (SIEM) content creation
• Ability to right regular expressions for correlation
• Python and other scripting language