As a Security Operations Center (SOC) Advisor, you will be responsible for enabling efficient and accurate incident response activities and daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams like Mandiant Architects, Mandiant Engineers, client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on incident response activities to support the client's CDC. In addition, you may be responsible for the analysis, response, containment, remediation, and long-term improvement of a client's SOC in order to maintain and transform incident detection and response capabilities.

In this role, you will be a member of a highly technical team in a rapidly changing environment, be experienced in administering a variety of information security technologies, excited to learn new emerging technologies, and passionate about protecting customer data and corporate assets from the diverse threats facing multiple industries.

• Identify challenges in customer CDCs and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research and leverage cyber security intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve SOC incident detection and response capabilities.
• Engage and collaborate with client stakeholders and other groups within customer environment to drive resolution for security issues.