Cybersecurity SOC Analyst

About Mirketa Inc

Mirketa Inc is a California-based digital transformation and technology company, headquartered in Dublin, CA, serving clients across the United States and Europe. We specialize in enterprise platforms including Salesforce, healthcare technology, cloud infrastructure, analytics, and custom application development.

Elixir EHR is Mirketa’s native Salesforce-based EHR and Practice Management platform, purpose-built to leverage the scalability, security, and extensibility of the Salesforce ecosystem. Elixir enables healthcare providers to modernize clinical and operational workflows while benefiting from Salesforce-native reporting, automation, interoperability, and ecosystem integrations.

About the Role

We are seeking an experienced SOC Analyst with 8-12 years of proven professional experience.

Key Responsibilities

Handling and escalation of alerts that require technical triage and analysis. This may
include web attacks, malware infections, and phishing campaigns which have been
identified by the Information Risk & Security team’s technology stack.

Functional Responsibilities

Monitoring SIEM solutions and a variety of other security devices found in a SOC environment (e.g. Behavioral Analytics tools, IDS/IPS, log management tools, and security analytics platforms).
Creating and maintaining documentation for security event processing.
Acknowledge and handle the incoming security alerts.
Use the internal ticketing system and dashboards to update the tickets/alerts accordingly and escalate them to the appropriate teams if necessary.
Assist the Incident Response team on alerts escalated to them by the SOC team.
Develop/Update and follow Standard Operating Procedures (SOPs) and Playbooks to handle standard and out-of-band alerts.
Report to the Incident Response Team quickly and efficiently regarding urgent matters.
Ensure ticket queues are always within satisfactory limits, and all tickets are updated.
Provide On-Call Support for emergencies or high severity issues.
Liaise with partner teams and end-users for security related tickets and activities.

Proactive threat hunting services

Threat hunting activities shall be performed using Keysight cybersecurity tools in accordance with the MITRE ATT&CK framework.
Proactively searching Keysight’s environment for anomalies that might indicate vulnerabilities and then implement proactive threat hunting to validate assumptions and mitigate risks
Determination / hunting of Indicator of Compromises, TTPs of known threat vectors reported by Keysight and open-source Threat Intel platforms
Hypothesis-driven investigations that provide insight into cybercriminals’ latest tactics, techniques and procedures (TTP). Use TTP insights to investigate whether those behaviors are present within the Keysight environment.