About the position
WPS Health Solutions is seeking a Principal SOC Analyst to join our Security Operations Center (SOC) team. This role is crucial for driving the maturity and growth of our security program. As a Principal SOC Analyst, you will not only respond to alerts but also create new detection techniques, implement new use cases, and tune current detection methods. You will play a pivotal role in helping the SOC innovate using new technologies and platforms. WPS is a highly secure and compliant healthcare company, providing innovative solutions to our healthcare customers and clients. In this position, you will be responsible for tuning and maintaining current detection techniques, creating and maintaining investigation and response plays used by other analysts, mentoring and enhancing the skills of other analysts, performing threat hunting, and investigating new detection techniques. You will also participate in an on-call rotation with other SOC analysts, act as a primary Incident Responder during security incidents, collaborate with our IS business partners in enhancements or investigations, and proactively immunize WPS from emerging threats. This role offers remote work options with occasional travel to WPS headquarters in Madison, WI.
Responsibilities
- Tune and maintain current detection techniques.
- Create and maintain investigation and response plays that are used by other analysts.
- Mentor and enhance the other analysts' skills.
- Perform threat hunting and investigate new detection techniques.
- Participate in on-call rotation with other SOC analysts.
- Act as a primary Incident Responder during Security Incidents.
- Collaborate with our IS business partners in enhancements or investigations.
- Pro-actively immunize WPS from emerging threats.
- Provide leadership, expertise, and solutions for complex initiatives.
Requirements
- U.S. Citizenship is required due to Department of Defense restrictions.
- Bachelor's Degree in a related field or equivalent post high school and/or related work experience.
- 2 or more years of related work experience within a SOC or security environment.
Nice-to-haves
- 7 or more years of experience working in a Security Operations Center environment.
- Familiarity with MITRE AT&CK framework.
- Significant SIEM/SOAR experience.
- Scripting skills (PowerShell and/or Python).
- Advanced understanding of Windows, Linux, and/or UNIX OS.
- Understanding of networking including packet capture analysis.
Benefits
- Remote and hybrid work options available
- Performance bonus and/or merit increase opportunities
- 401(k) with dollar-per-dollar match up to 6% of salary (100% vested immediately)
- Competitive paid time off
- Health insurance, dental insurance, and telehealth services start DAY 1
- Employee Resource Groups
- Professional and Leadership Development Programs
