Software Guidance & Assistance, Inc., (SGA), is searching for an Information Security Analyst (Security Operations / SOC Focus) for a contract assignment with one of our premier Financial Services clients in San Francisco, CA .
Responsibilities :
- Monitor and analyze security events using Splunk, applying SPL queries to identify patterns, anomalies, and potential threats.
- Support Level and Level SOC operations, including initial triage, escalation, and incident response activities aligned with the cyber kill chain framework.
- Use SQL for querying and validating event data across databases and reporting platforms.
- Apply Python (or R) for automating security analysis tasks, parsing logs, or building small tools for data enrichment.
- Prepare reports and presentations using Microsoft Excel and PowerPoint to summarize findings and support incident reviews.
- Contribute to process improvement and threat-hunting efforts by correlating data from multiple sources.
Required Skills :
Splunk experience (creating SPL queries, dashboards, or alert tuning)Strong SQL knowledge for data querying and validationPython programming (or equivalent scripting experience)Understanding of SOC operations (Level & ) and incident response fundamentalsFamiliarity with the Cyber Kill Chain model and related threat frameworksProficiency in Microsoft Office (Excel, PowerPoint) for reporting and presentations