SOC Analyst

About Us Thrive is an innovative technology solutions provider focused on Cyber Security, Hybrid Cloud, Global Network Management, Disaster Recovery and traditional Managed Services. Our corporate culture, engineering talent, customer‑centric approach, and focus on NextGen services help us stand out among our peers. Thrive is on the lookout for individuals who want to develop valuable skills that ignite passion and lead to a career, in a work‑hard, play‑hard environment. Position Overview With a growing client base, Thrive is building out its security team. We are hiring a SOC Analyst 1 to assist with continuously monitoring and improving our customers’ security posture while preventing, detecting, analyzing, and responding to cybersecurity incidents using technology and well‑defined processes. Primary Responsibilities Perform security event monitoring using Security Information and Event Management (SIEM) from multiple sources, including network and host‑based intrusion detection/prevention systems, network infrastructure logs, systems logs, applications, and databases. Investigate intrusion attempts, differentiate false positives from true intrusion attempts, and analyze exploits. Proactively monitor and respond to known and emerging threats. Carry out Thrive’s information security strategy internally and externally for 400+ clients in the northeast. Analyze data from our SOC and SIEM and determine if further analysis is needed. Work within Thrive’s security standards and best practices and recommend future enhancements. Manage our clients’ security awareness training to help end users stay safe. Analyze vulnerability scans and determine remediation steps. Stay abreast of security events and techniques to keep our clients protected. Build awareness through training and education. Qualifications Knowledge of the following systems and technologies: SIEM (Security Information and Event Management) TCP/IP, computer networking, routing, and switching IDS/IPS, penetration and vulnerability testing Firewall and intrusion detection/prevention protocols Windows, UNIX, and Linux operating systems Network protocols and packet analysis tools EDR, anti‑virus, and anti‑malware Content filtering Email and web gateway Understanding of cybersecurity threats and experience with incident response standards and procedures. Demonstrated comprehension of good security practices. Professional experience in a system administration role supporting multiple platforms and applications. Ability to communicate network security issues to peers and management. Ability to analyze large amounts of data from various sources and use this information to solve complex problems. Strong written and verbal communication skills. Knowledge of common Windows and Linux/Unix system calls and APIs, anti‑virus, programming languages. Understanding of internal file structures for file formats associated with malware (OLE, RTF, PDF, EXE). NOTE: Only candidates located in the Philippines and willing to work out of the Clark office should apply. #J-18808-Ljbffr